6087 matches found
MAL-2025-186680 Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177703
Malicious code in native-gacrux-antares-phoenix npm...
EUVD-2025-177630
Malicious code in neutronstar-native-dynamo-hydra npm...
EUVD-2025-177695
Malicious code in native-transform-nightmare-polaris npm...
EUVD-2025-179001
Malicious code in eventhoriz-native-planckscale-cosmochemistry npm...
EUVD-2025-179495
Malicious code in cross-env-vega-native-blazar npm...
EUVD-2025-177704
Malicious code in native-electron-builder-nashira-tachyon npm...
Malicious code in resolvers-solis-native-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d6c0271bfa31246dc0e28318a0cfb1ce680b0268ea0bf941130328312bcf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177707
Malicious code in native-callback-prettier-magellan npm...
EUVD-2025-176805
Malicious code in radiometric-native-adonis-cygnus npm...
MAL-2025-189970 Malicious code in transform-version-sequelize-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0b260696b6e01b16b95ea6411e5bdda668fb587ccda3c63e369cde6cd117d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124626
Malicious code in native-phoenix-antares-publish npm...
EUVD-2025-120412
Malicious code in winston-ophiuchus-native-parcel npm...
Malicious code in cygnus-rollup-package-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121114
Malicious code in triton-duplex-jsonp-native npm...
EUVD-2025-122244
Malicious code in sass-loader-native-jsonp-callisto npm...
EUVD-2025-121633
Malicious code in stop-dactyl-native-octans npm...
EUVD-2025-121634
Malicious code in stop-colors-native-sedna npm...