442 matches found
EUVD-2025-180397
Malicious code in apex-gulp-npm-dione npm...
EUVD-2025-178361
Malicious code in io-gulp-apollo-javascript npm...
EUVD-2025-178630
Malicious code in gulp-kinetic-mongodb-astrometry npm...
EUVD-2025-177866
Malicious code in meteor-chalk-blueshift-gulp npm...
Malicious code in tethys-gulp-bootstrap-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124227
Malicious code in nuxtjs-apollo-gulp-nodejs npm...
EUVD-2025-113003
Malicious code in gulp-avior-dependencies-tool npm...
Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112998
Malicious code in gulp-cluster-chalk-phoenix npm...
Malicious code in sails-changelog-gulp-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a607cb7ad8c3dec200f7bf484afda3b782c0dbb18494d0b44af73cd797bd4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113297
Malicious code in ganymede-procyon-gulp-webdriver-mocha npm...
EUVD-2025-116900
Malicious code in achernar-morgan-gulp-octans npm...
EUVD-2025-123137
Malicious code in publish-gulp-nestjs-yonder npm...
EUVD-2025-112995
Malicious code in gulp-json-buffer-grus npm...
EUVD-2025-112999
Malicious code in gulp-celeste-celeste-dorado npm...
EUVD-2025-114257
Malicious code in eclipse-gulp-terser-inquirer npm...
EUVD-2025-121041
Malicious code in ultra-auriga-gulp-gulp npm...
Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...