428 matches found
EUVD-2025-112004
Malicious code in karma-gridsome-backend-hydra npm...
EUVD-2025-116773
Malicious code in alphard-karma-airbnb-figures npm...
EUVD-2025-123744
Malicious code in phoebe-run-script-subscription-karma npm...
MAL-2025-147454 Malicious code in rimraf-native-wezen-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f783af03f5cd53bdf2d57a926a7e3f1eac33d66fc2c6865ab531181c7f231f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143239 Malicious code in helios-quasar-karma-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112017
Malicious code in karma-centauri-nodejs-jupiter npm...
MAL-2025-140358 Malicious code in canopus-config-karma-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144108 Malicious code in karma-ganymede-chalk-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819f1a214fd0d4e2d68030032a4a8261353707da867a164d5a15d4ad38aedf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116455
Malicious code in atlas-karma-sync-galaxy npm...
MAL-2025-142939 Malicious code in global-karma-socketio-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0241b4284d51930d8f79f4a26732e32fd0daa7662b27526d3f2e8df46389bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144106 Malicious code in karma-fornax-sequelize-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146420 Malicious code in postcss-protractor-karma-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16675a33058376a90e011bd1d015a37a8d8b845bea120f47975b1d70153514a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Package
Overview karma-verbose-summary-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
EUVD-2025-32642
Malicious code in karma-verbose-summary-reporter npm...
Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47994 Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2008-6246
Malware in sbrugna...