623 matches found
Malicious code in @voiceflow/pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199397
Malicious code in @voiceflow/pino-pretty npm...
MAL-2025-191365 Malicious code in @voiceflow/pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...
Malicious code in @postman/pretty-ms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190910 Malicious code in @postman/pretty-ms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious Package
Overview pretty-jsonify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-197906
Malicious code in pretty-jsonify npm...
Malicious code in pretty-jsonify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448c877af04a46d01d52e722de63fc0f986a877952bfc332c784d6b054b144ea The package pretty-jsonify was found to contain malicious code. Source: ghsa-malware 649213f861633958745285a1555fc21e61fa6cdc511641465cfa66e4317a7373...
MAL-2025-190554 Malicious code in pretty-jsonify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448c877af04a46d01d52e722de63fc0f986a877952bfc332c784d6b054b144ea The package pretty-jsonify was found to contain malicious code. Source: ghsa-malware 649213f861633958745285a1555fc21e61fa6cdc511641465cfa66e4317a7373...
EUVD-2025-176339
Malicious code in slidev-odin-charon-pino-pretty npm...
EUVD-2025-175618
Malicious code in webdriver-manager-bulma-pino-pretty-hercules npm...
EUVD-2025-178187
Malicious code in kinetic-redshift-pino-pretty-prettier-plugin-markdown npm...
Malicious code in bellatrix-command-testcafe-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b703a2d20efa32ac0ae07b76175be8aa18b3f4ebfa944f7d27fafa977a66963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slidev-odin-charon-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179069
Malicious code in eridanus-rigel-cosmiconfig-pino-pretty npm...
MAL-2025-188707 Malicious code in pino-pretty-prettier-sequelize-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bde5720db4c2110dd2e282776b87cae97883f7ed7cd03ed524b7a0c027d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176031
Malicious code in tectonic-pino-pretty-build-elara npm...