497 matches found
Malicious code in sails-changelog-gulp-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a607cb7ad8c3dec200f7bf484afda3b782c0dbb18494d0b44af73cd797bd4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124395
Malicious code in node-sass-antares-gulp-sync npm...
EUVD-2025-113532
Malicious code in fork-carpo-commitlint-gulp npm...
Malicious code in phoenix-gulp-process-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae575b21ecbd0dd8b9c7c8e286e5596944cc54f7d11647c0ffab8e1f6075267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-xanthus-gulp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in celeste-gulp-quito-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95a706d8fcb139fc6c13e9cb35d3a15d976bd763cd46ba60ce9024625e4a61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124812
Malicious code in module-gulp-eris-cosmiconfig npm...
EUVD-2025-120434
Malicious code in winston-gulp-test-rest npm...
EUVD-2025-114523
Malicious code in dependencies-thuban-gulp-command npm...
EUVD-2025-114614
Malicious code in deimos-gulp-convict-rimraf npm...
EUVD-2025-123725
Malicious code in phoenix-gulp-process-kaus npm...
EUVD-2025-116209
Malicious code in backend-oberon-gulp-umbra npm...
Malicious code in gulp-redis-request-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c8ef942bd7a82c1f09f33c71aa57572c414ca06225c9880ee6e27f9a5d6fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tethys-gulp-bootstrap-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120366
Malicious code in wolf-tailwindcss-gulp-docusaurus npm...
Malicious code in eclipse-gulp-terser-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7af3a81cf4b261052c0783fd16d57e1d48f64884ecc3521a0df8cebd25a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...