191 matches found
Malicious code in pm2-run-script-eslint-plugin-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124196
Malicious code in oauth-corvus-atlas-run-script npm...
EUVD-2025-112914
Malicious code in hapi-run-script-draco-hermes npm...
EUVD-2025-116586
Malicious code in apollo-indus-run-script-lyra npm...
EUVD-2025-120322
Malicious code in xanadu-run-script-ceres-loopback npm...
EUVD-2025-122368
Malicious code in run-script-update-tethys-jovian npm...
EUVD-2025-116741
Malicious code in altair-pulsar-run-script-procyon npm...
EUVD-2025-122378
Malicious code in run-script-got-cross-env-yaml npm...
Malicious code in thuban-run-script-callback-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116557
Malicious code in aquarius-phoenix-prompts-run-script npm...
EUVD-2025-112895
Malicious code in heka-run-script-norma-mongodb npm...
EUVD-2025-120568
Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...
EUVD-2025-122381
Malicious code in run-script-charon-rigel-koa npm...
EUVD-2025-124550
Malicious code in neptune-nuxtjs-axios-run-script npm...
Malicious code in xanadu-run-script-ceres-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123078
Malicious code in pulsar-run-script-redis-convict npm...
Malicious code in markdownlint-standard-run-script-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...