240 matches found
MAL-2025-186330 Malicious code in cosmiconfig-gatsby-janus-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176412
Malicious code in server-nebula-cosmiconfig-umbra npm...
EUVD-2025-177588
Malicious code in nightwatch-sedna-cosmiconfig-duplex npm...
EUVD-2025-179552
Malicious code in cosmiconfig-gatsby-janus-slides npm...
EUVD-2025-179436
Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...
Malicious code in server-nebula-cosmiconfig-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179555
Malicious code in cosmiconfig-biosignature-vulcan-pipe npm...
EUVD-2025-179550
Malicious code in cosmiconfig-xml-rehype-webpack npm...
EUVD-2025-178794
Malicious code in galaxy-cosmology-remark-cosmiconfig npm...
EUVD-2025-177492
Malicious code in octans-non-blocking-repository-cosmiconfig npm...
EUVD-2025-178309
Malicious code in janus-greatfilter-cosmiconfig-ursa npm...
MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186331 Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114933
Malicious code in cosmiconfig-convict-despina-nuxtjs npm...
EUVD-2025-113620
Malicious code in firebase-cordelia-ignite-cosmiconfig npm...
EUVD-2025-114913
Malicious code in cosmiconfig-release-it-xenon-pyxis npm...
EUVD-2025-114923
Malicious code in cosmiconfig-meteor-draco-antares npm...