623 matches found
Malicious code in pino-pretty-ariel-ursa-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8542974294f7b08d56d4663d4c85ce4e855d42cc2fd27671470865ae06213649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177169
Malicious code in pino-pretty-phenomic-quasar-meteor npm...
EUVD-2025-177171
Malicious code in pino-pretty-exosphere-cosmology-rate-limiter npm...
EUVD-2025-177165
Malicious code in pino-pretty-yildun-express-graphql npm...
EUVD-2025-180116
Malicious code in bellatrix-command-testcafe-pino-pretty npm...
EUVD-2025-177172
Malicious code in pino-pretty-electron-palynology-bootes npm...
EUVD-2025-177168
Malicious code in pino-pretty-prettier-sequelize-figures npm...
EUVD-2025-179257
Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...
EUVD-2025-180061
Malicious code in bioinformatics-pino-pretty-mutation-vuepress npm...
EUVD-2025-177587
Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog npm...
Malicious code in pino-pretty-radiant-less-loader-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f26e9ea5896df0ce372833130544656e3589f313b17873c4069dfdc07eab2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177166
Malicious code in pino-pretty-technosignature-biomimicry-wezen npm...
EUVD-2025-180272
Malicious code in async-dotenv-pino-pretty-odin npm...
EUVD-2025-178623
Malicious code in hadron-pino-pretty-hermes-jabbah npm...
EUVD-2025-175762
Malicious code in ursa-pino-pretty-petrology-quark npm...
EUVD-2025-178137
Malicious code in lepton-weywot-mira-pino-pretty npm...
EUVD-2025-113712
Malicious code in express-zenith-scorpius-pino-pretty npm...
Malicious code in pino-pretty-gemini-blaze-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2933cf53141966341dc532869b9f1b14b26188a435d8d1446e8c5ece9588b2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...