191 matches found
EUVD-2025-122378
Malicious code in run-script-got-cross-env-yaml npm...
EUVD-2025-111385
Malicious code in markdownlint-standard-run-script-comet npm...
EUVD-2025-113516
Malicious code in fork-run-script-json-bootstrap npm...
MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141836 Malicious code in dynamo-run-script-nashira-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123078
Malicious code in pulsar-run-script-redis-convict npm...
Malicious code in thuban-run-script-callback-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124368
Malicious code in node-sass-run-script-chariklo-uninstall npm...
EUVD-2025-120242
Malicious code in xenos-run-script-weywot-exec npm...
EUVD-2025-124120
Malicious code in odin-run-script-scripts-bootstrap npm...
EUVD-2025-122367
Malicious code in run-script-vuepress-bootes-enceladus npm...
Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122374
Malicious code in run-script-mysql-antd-csv npm...
EUVD-2025-120568
Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...
EUVD-2025-111772
Malicious code in less-non-blocking-run-script-xanthus npm...
EUVD-2025-122382
Malicious code in run-script-changelog-publish-canopus npm...
EUVD-2025-123744
Malicious code in phoebe-run-script-subscription-karma npm...