4775 matches found
MAL-2025-148720 Malicious code in toml-nodejs-spinner-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b665158c37110255c5be34bbe5ad2da8289d225777f4daeed830c7f915a5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124227
Malicious code in nuxtjs-apollo-gulp-nodejs npm...
Malicious code in pm2-xerxes-luna-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111140
Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...
EUVD-2025-121208
Malicious code in toml-nodejs-spinner-uglify-js npm...
EUVD-2025-121885
Malicious code in soap-winston-antares-nodejs npm...
Malicious code in phenomic-json-nodejs-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-fork-nodejs-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zenobia-nodejs-sass-loader-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4612b348f54e7b925fedd6e8bf99644e18a6cda4dc4e08b72f5925baae34e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tool-sails-nodejs-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93e3471899ae35d729a7f8c6bdeca06ee3b377bb9447f02dc441b537fe77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124349
Malicious code in nodejs-mongoose-dotenv-mongoose npm...
EUVD-2025-121962
Malicious code in sirius-nodejs-pino-chalk npm...
EUVD-2025-122220
Malicious code in scorpius-betelgeuse-repository-nodejs npm...
EUVD-2025-116050
Malicious code in blitz-nodejs-postcss-umbra npm...
Malicious code in redis-europa-nodejs-rate-limiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e6c8ec825ff834f3e5e8833c43a6562685e59b8c189ec4687da1cad6bfd3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122989
Malicious code in quark-pipe-mocha-nodejs npm...
EUVD-2025-121641
Malicious code in start-ursa-nodejs-server npm...
EUVD-2025-113468
Malicious code in fornax-polaris-nodejs-ignite npm...