742 matches found
EUVD-2025-114892
Malicious code in cosmos-query-wezen-repository npm...
Malicious code in loopback-install-cosmos-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123925
Malicious code in pavo-dotenv-safe-cosmos-cordelia npm...
MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144578 Malicious code in luna-phoebe-despina-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112644
Malicious code in hyperion-cosmos-avior-leda npm...
EUVD-2025-114903
Malicious code in cosmos-eslint-transform-ini npm...
EUVD-2025-121063
Malicious code in uglify-js-apollo-cosmos-karma npm...
EUVD-2025-124721
Malicious code in mui-cosmos-less-loader-duplex npm...
EUVD-2025-114905
Malicious code in cosmos-cygnus-lyra-restart npm...
EUVD-2025-112589
Malicious code in ignite-private-cosmos-nuxtjs npm...
EUVD-2025-114909
Malicious code in cosmos-blitz-got-cache npm...
EUVD-2025-122225
Malicious code in schema-init-less-loader-cosmos npm...
EUVD-2025-114897
Malicious code in cosmos-nightwatch-sync-redis npm...
EUVD-2025-111470
Malicious code in magellan-levels-cosmos-solis npm...
Malicious code in airbnb-module-winston-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122412
Malicious code in rollup-plugin-callisto-figures-cosmos npm...
EUVD-2025-115440
Malicious code in changelog-cosmos-sync-transform npm...