2340 matches found
MAL-2025-149471 Malicious code in wezen-uglify-js-stop-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120786
Malicious code in version-prettier-stylelint-private-envconfig npm...
EUVD-2025-124863
Malicious code in miranda-resolvers-wolf-xanadu npm...
EUVD-2025-113273
Malicious code in gatsby-deimos-procyon-forever npm...
EUVD-2025-112341
Malicious code in jabbah-chariklo-odin-zephyr npm...
EUVD-2025-124396
Malicious code in node-config-xerxes-cz-conventional-changelog-rehype npm...
EUVD-2025-124345
Malicious code in nodejs-quito-deimos-publish npm...
EUVD-2025-124899
Malicious code in miranda-ariel-metalsmith-css-loader npm...
EUVD-2025-112493
Malicious code in init-europa-cressida-yonder npm...
EUVD-2025-120351
Malicious code in writable-supervisor-proxima-solis npm...
EUVD-2025-120686
Malicious code in vulcan-leda-auriga-antares npm...
EUVD-2025-114084
Malicious code in enceladus-delphinus-spawn-farout npm...
EUVD-2025-113752
Malicious code in exec-phoenix-miranda-mira npm...
EUVD-2025-124773
Malicious code in mongoose-altair-carpo-release-it npm...
EUVD-2025-116550
Malicious code in aquarius-style-loader-start-semantic-ui npm...
EUVD-2025-124053
Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...
EUVD-2025-120235
Malicious code in xenos-xenon-husky-webpack npm...
Malicious code in gatsby-deimos-procyon-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d77642dde07d3fd52edbf4d4476515f45d4e83d6b3392ffd5e5aa7050aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in html-webpack-plugin-wasat-fornax-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b11210d9eda121cf11eccb91860419ad970b15ca9cd114ec8df21e82196e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...