442 matches found
MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148132 Malicious code in spectron-webdriver-gulp-quasar-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115493
Malicious code in chakra-ui-gatsby-terser-webpack-plugin-gulp npm...
EUVD-2025-114523
Malicious code in dependencies-thuban-gulp-command npm...
EUVD-2025-116689
Malicious code in antares-gulp-apex-spinner npm...
EUVD-2025-114614
Malicious code in deimos-gulp-convict-rimraf npm...
Malicious code in test-gulp-charon-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0b29895741df36eac04a6503a42748cbc25a8cb6c273d2444900b7c35c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-xanthus-gulp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-avior-dependencies-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124204
Malicious code in nuxtjs-typeorm-odin-gulp npm...
EUVD-2025-120434
Malicious code in winston-gulp-test-rest npm...
EUVD-2025-113523
Malicious code in fork-gulp-bellatrix-semantic-release npm...
Malicious code in gulp-command-luna-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8040998f40a0ab4389d7ecae619200c50d3cfc532206a62d56ab42529709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124812
Malicious code in module-gulp-eris-cosmiconfig npm...
Malicious code in gacrux-gulp-proxima-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ba965195f1d4a56aabb0fa309c472adc314ed7bd6605574f65f81aac4897af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112991
Malicious code in gulp-package-remark-non-blocking npm...
EUVD-2025-124838
Malicious code in mocha-gulp-cordelia-buffer npm...