497 matches found
MAL-2025-187755 Malicious code in less-loader-gulp-yaml-crust (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178422
Malicious code in indus-reveal-md-gulp-neptune npm...
EUVD-2025-178628
Malicious code in gulp-parcel-bioinformatics-halley npm...
EUVD-2025-121981
Malicious code in sirius-cressida-gulp-subscription npm...
EUVD-2025-122910
Malicious code in radiant-comet-module-gulp npm...
EUVD-2025-121355
Malicious code in test-gulp-charon-janus npm...
EUVD-2025-121117
Malicious code in triton-convict-yakutsk-gulp npm...
EUVD-2025-120692
Malicious code in vulcan-gulp-ora-browserify npm...
EUVD-2025-112993
Malicious code in gulp-nightmare-postcss-cordelia npm...
EUVD-2025-116928
Malicious code in acamar-gulp-forever-solis npm...
EUVD-2025-113887
Malicious code in eslint-markdown-pdf-gulp-eleventy npm...
Malicious code in adonis-gulp-ini-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123511
Malicious code in postcss-loader-slidev-gulp-bellatrix npm...
Malicious code in lint-staged-ganymede-titan-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac0691969c683ccf6abff93d005c2db42f31a9073ea430084172a3c7938c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115203
Malicious code in command-gulp-stream-stream npm...
EUVD-2025-113344
Malicious code in gacrux-gulp-proxima-prettier npm...
EUVD-2025-112507
Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...
EUVD-2025-122712
Malicious code in relay-sedna-gulp-altair npm...
Malicious code in test-gulp-charon-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0b29895741df36eac04a6503a42748cbc25a8cb6c273d2444900b7c35c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...