200 matches found
EUVD-2025-116586
Malicious code in apollo-indus-run-script-lyra npm...
EUVD-2025-123078
Malicious code in pulsar-run-script-redis-convict npm...
EUVD-2025-111595
Malicious code in loglevel-run-script-cross-env-superagent npm...
EUVD-2025-113126
Malicious code in got-run-script-proxima-await npm...
EUVD-2025-124475
Malicious code in nightmare-run-script-cosmiconfig-non-blocking npm...
EUVD-2025-113516
Malicious code in fork-run-script-json-bootstrap npm...
EUVD-2025-124196
Malicious code in oauth-corvus-atlas-run-script npm...
EUVD-2025-114390
Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...
MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122378
Malicious code in run-script-got-cross-env-yaml npm...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141836 Malicious code in dynamo-run-script-nashira-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115110
Malicious code in commitlint-zenobia-run-script-superagent npm...
Malicious code in xanadu-run-script-ceres-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124368
Malicious code in node-sass-run-script-chariklo-uninstall npm...
EUVD-2025-122374
Malicious code in run-script-mysql-antd-csv npm...
EUVD-2025-121264
Malicious code in thuban-run-script-callback-meteor npm...