240 matches found
EUVD-2025-114883
Malicious code in cressida-cosmiconfig-bulma-global npm...
EUVD-2025-116043
Malicious code in blitz-regulus-phoebe-cosmiconfig npm...
EUVD-2025-114546
Malicious code in dependencies-changelog-cosmiconfig-colors npm...
EUVD-2025-120129
Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig npm...
EUVD-2025-121423
Malicious code in telesto-webdriver-mocha-cosmiconfig-bellatrix npm...
Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113668
Malicious code in fetch-event-cosmiconfig-chalk npm...
EUVD-2025-112979
Malicious code in halley-cosmiconfig-nodejs-ganymede npm...
EUVD-2025-114917
Malicious code in cosmiconfig-playwright-geckodriver-europa npm...
MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139964 Malicious code in betelgeuse-airbnb-cosmiconfig-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2ca7c054c5dc5dc4749da5d34633882bc0f11a8ea5e0349b8a44949a61697f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149479 Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141192 Malicious code in cosmiconfig-playwright-geckodriver-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e69aa1a9f0729ec350a6b2c8b90f2cb561c83d2a0637be9da2edbcb9eebb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123824
Malicious code in perseus-magellan-cosmiconfig-concurrently npm...
EUVD-2025-122011
Malicious code in shelljs-europa-cosmiconfig-concurrently npm...
EUVD-2025-114395
Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...
EUVD-2025-114937
Malicious code in cosmiconfig-avior-got-changelog npm...
MAL-2025-144846 Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143167 Malicious code in halley-soap-cosmiconfig-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878f47aabf7c8d166e8bf83e6a92ca0f1d56d5ae5dbf7edab11cd99f50c7502d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...