5510 matches found
MAL-2025-143629 Malicious code in init-postcss-markdown-pdf-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in init-xenos-forever-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037cbe531b734ea1d67a651682ecfb3115ec8a3abe390a6a187266e51cbf4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140430 Malicious code in carpo-async-ganymede-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30455e0f409485a1dc7ed4659e0f3c508d3a48c6b811106230b3a148fbc8881d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112496
Malicious code in init-cosmos-corvus-pavo npm...
EUVD-2025-114461
Malicious code in dione-pavo-regulus-init npm...
EUVD-2025-120689
Malicious code in vulcan-init-pino-pretty-geckodriver npm...
EUVD-2025-115358
Malicious code in child-process-init-winston-frontend npm...
EUVD-2025-112482
Malicious code in init-solis-gravity-proxima npm...
Malicious code in bunyan-gridsome-init-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123408
Malicious code in prettier-stylelint-odin-hexo-init npm...
EUVD-2025-120384
Malicious code in wolf-dotenv-safe-init-process npm...
EUVD-2025-112481
Malicious code in init-subscription-callisto-europa npm...
EUVD-2025-123369
Malicious code in process-init-ignite-regulus npm...
EUVD-2025-123497
Malicious code in postcss-vuepress-nestjs-init npm...
EUVD-2025-113121
Malicious code in got-umbriel-bootes-init npm...
EUVD-2025-122226
Malicious code in schema-init-cosmiconfig-postcss-loader npm...
EUVD-2025-122294
Malicious code in sagitta-vuepress-delphinus-init npm...