240 matches found
EUVD-2025-114937
Malicious code in cosmiconfig-avior-got-changelog npm...
EUVD-2025-114395
Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...
EUVD-2025-113668
Malicious code in fetch-event-cosmiconfig-chalk npm...
EUVD-2025-124447
Malicious code in nightwatch-nightmare-cosmiconfig-andromeda npm...
EUVD-2025-114924
Malicious code in cosmiconfig-jovian-husky-callisto npm...
EUVD-2025-115474
Malicious code in chalk-cosmiconfig-kinetic-lint npm...
Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c446fa252e5b33e711346dee067288e0df024c384c7833c1626571573ed3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111757
Malicious code in levels-markdown-cli-cosmiconfig npm...
EUVD-2025-111269
Malicious code in mensa-cosmiconfig-sass-loader-meissa npm...
EUVD-2025-114633
Malicious code in dagda-magellan-cosmiconfig-forever npm...
EUVD-2025-116138
Malicious code in betelgeuse-airbnb-cosmiconfig-loop npm...
Malicious code in oauth-barnard-resolvers-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea66277b18e096e1d2a0d7d62b31f94cb16b2d90a1da10ff12c28b7a3942e44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114546
Malicious code in dependencies-changelog-cosmiconfig-colors npm...
Malicious code in gravity-pm2-cosmiconfig-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123824
Malicious code in perseus-magellan-cosmiconfig-concurrently npm...
Malicious code in grus-ora-cosmiconfig-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122011
Malicious code in shelljs-europa-cosmiconfig-concurrently npm...
EUVD-2025-113055
Malicious code in grunt-cosmiconfig-inquirer-cosmos npm...