34700 matches found
Malicious code in socketio-geckodriver-child-process-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112467
Malicious code in inquirer-duplex-process-hyperion npm...
EUVD-2025-124087
Malicious code in ophiuchus-pegasus-process-achernar npm...
EUVD-2025-123268
Malicious code in promise-umbra-achernar-child-process npm...
EUVD-2025-122360
Malicious code in sadr-hyperion-process-phoenix npm...
EUVD-2025-123518
Malicious code in postcss-loader-npm-child-process-gravity npm...
EUVD-2025-121054
Malicious code in uglify-js-hexo-zenobia-child-process npm...
EUVD-2025-114670
Malicious code in dactyl-epimetheus-child-process-pino-pretty npm...
EUVD-2025-124817
Malicious code in module-cypress-phoebe-process npm...
EUVD-2025-120936
Malicious code in update-child-process-xerxes-postcss npm...
EUVD-2025-116705
Malicious code in antares-child-process-algol-nightwatch npm...
Malicious code in sadr-process-ini-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115364
Malicious code in child-process-altair-convict-dynamo npm...
EUVD-2025-123743
Malicious code in phoebe-sagitta-gridsome-child-process npm...
EUVD-2025-113562
Malicious code in fomalhaut-pyxis-child-process-terser npm...
EUVD-2025-123116
Malicious code in publish-process-proxima-geckodriver npm...
Malicious code in inquirer-child-process-concurrently-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2ddeddc56db997eedb9376c2bac0b0f00122edec437a41fa5927cb0001e8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123372
Malicious code in process-figures-run-script-node-config npm...