143358 matches found
EUVD-2025-175764
Malicious code in ursa-mui-rest-xerxes npm...
EUVD-2025-176553
Malicious code in sagitta-shelljs-halley-grunt npm...
EUVD-2025-176522
Malicious code in sass-loader-cluster-link-jekyll npm...
EUVD-2025-179472
Malicious code in csrf-farout-backend-fomalhaut npm...
EUVD-2025-180141
Malicious code in bad-xml-simple-yaml-reject npm...
EUVD-2025-177293
Malicious code in pavo-helmet-titan-kinetic npm...
EUVD-2025-177375
Malicious code in paleoclimatology-draco-backend-triton npm...
EUVD-2025-179844
Malicious code in catch-daemon-mock-emulate-validate npm...
EUVD-2025-176380
Malicious code in signal-quick-proxy-data-web npm...
Malicious code in library-volcanology-magnetosphere-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708f64ae257d4aca048c20cf895d70f55011231980d876ebe03f4b405952b3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179033
Malicious code in eslint-plugin-semantic-release-chalk-fusion npm...
EUVD-2025-177152
Malicious code in pipe-parallax-build-kinetic npm...
EUVD-2025-175530
Malicious code in writable-jovian-pino-markdownlint npm...
EUVD-2025-178044
Malicious code in local-jasmine-gammarayburst-delphinus npm...
EUVD-2025-175422
Malicious code in zenobia-quantum-yakutsk-superflare npm...
Malicious code in gacrux-farout-publish-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452c960aa8905735a4d5f1b36b9b11902ec192984de6bf397eedb20365903d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178425
Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...
EUVD-2025-180485
Malicious code in air-query-sun-void-debug npm...
Malicious code in resolvers-chakra-ui-bootstrap-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d79ea6a0ddcc32a8eefe901fe9fac78119e8f7ef1b653b5f8b55b441099df42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...