143454 matches found
Malicious code in dendrochronology-graphql-betelgeuse-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12230401a2890b637b05550d901e8bcf53d8e9b4dd1151598bc395c866b8e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176271
Malicious code in spectron-commitizen-server-jwt npm...
EUVD-2025-179292
Malicious code in docusaurus-bellatrix-xanthus-virgo npm...
EUVD-2025-178530
Malicious code in hexo-duplex-xenos-bootstrap npm...
EUVD-2025-175787
Malicious code in upgrade-quantum-computing-eslint-plugin-areology npm...
EUVD-2025-176650
Malicious code in reveal-md-electron-builder-chalk-steganography npm...
EUVD-2025-176817
Malicious code in radiant-on-oscillation-indus npm...
EUVD-2025-177048
Malicious code in private-enum-compress-upsilon-omega npm...
EUVD-2025-176766
Malicious code in redis-epimetheus-jabbah-apex npm...
EUVD-2025-176146
Malicious code in sudo-reject-mu-proxy-fork npm...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...
EUVD-2025-175934
Malicious code in titan-luna-luna-prompts npm...
Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180235
Malicious code in aurora-exec-nebula-titan npm...
EUVD-2025-178533
Malicious code in hermes-websockets-arcturus-meteor npm...
EUVD-2025-180491
Malicious code in aether-start-lepton-mdx npm...
Malicious code in radiometric-vega-element-ui-oortcloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1260fed5837dd3c43bd4ecea72add038d82fbcf75ec543f03ca004f630806fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jwt-antares-chakra-ui-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9411bd44509f93d667ced5c6dbbb2a8adf996313e23fb5f37005d64f9a0e6f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...