353 matches found
MAL-2025-190806 Malicious code in @ensdomains/mock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa69028234e7d9845b0190a845d7ed004315332e53db9625716d3e8c34f9d555 The package @ensdomains/mock was found to contain malicious code. Source: ghsa-malware e5e3d7ebf0c01ec0fcf11c5473aa2d0ae19924590bc4f27ac7e988945272d5...
EUVD-2025-175956
Malicious code in thread-daemon-try-omega-mock npm...
MAL-2025-185454 Malicious code in analyze-signal-bundle-query-mock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ac109472152832caa800b02a3b34b918e75736ec1e24c065add9391558992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180313
Malicious code in assert-alpha-boolean-awk-mock npm...
EUVD-2025-179057
Malicious code in error-error-authorize-phi-mock npm...
EUVD-2025-179372
Malicious code in decrypt-sun-mock-rain-debug npm...
EUVD-2025-179161
Malicious code in emulate-earth-lambda-iota-mock npm...
EUVD-2025-180219
Malicious code in authenticate-array-cluster-mock-import npm...
EUVD-2025-177791
Malicious code in mock-easy-tree-long-cloud npm...
EUVD-2025-176235
Malicious code in stack-compress-nu-zeta-mock npm...
EUVD-2025-179682
Malicious code in cold-mock-daemon-hash-thread npm...
EUVD-2025-180434
Malicious code in analyze-signal-bundle-query-mock npm...
EUVD-2025-178372
Malicious code in interface-stack-mock-execute-log npm...
EUVD-2025-177537
Malicious code in notify-beta-tree-mock-minify npm...
EUVD-2025-180176
Malicious code in awk-mock-rain-enum-pi npm...
EUVD-2025-176397
Malicious code in short-easy-cat-mock-daemon npm...
EUVD-2025-179844
Malicious code in catch-daemon-mock-emulate-validate npm...
EUVD-2025-177788
Malicious code in mock-string-simple-final-data npm...
EUVD-2025-176304
Malicious code in socket-mock-java-rho-spy npm...
Malicious code in socket-mock-java-rho-spy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73783490d318eb38b0f589f800124ffffafbe09192fd2fb01fc5ce1f82b4195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...