Malicious code in hapi-run-script-draco-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f52ceb1b572a541bb3ce44c44f647500abd52b1015c97b8a6e7de1ea336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116099

Malicious code in betelgeuse-run-script-remark-halley npm...

EUVD-2025-120568

Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...

EUVD-2025-115792

Malicious code in callback-run-script-html-webpack-plugin-server npm...

EUVD-2025-122382

Malicious code in run-script-changelog-publish-canopus npm...

EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

EUVD-2025-122367

Malicious code in run-script-vuepress-bootes-enceladus npm...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-111618

Malicious code in local-run-script-ophiuchus-global npm...

EUVD-2025-112914

Malicious code in hapi-run-script-draco-hermes npm...

EUVD-2025-121645

Malicious code in start-run-script-sagitta-proxima npm...

EUVD-2025-112556

Malicious code in indus-auth-run-script-capella npm...

EUVD-2025-120242

Malicious code in xenos-run-script-weywot-exec npm...

Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121687

Malicious code in sqlite-run-script-transform-cordelia npm...

EUVD-2025-121263

Malicious code in thuban-run-script-phoebe-phoebe npm...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2012-4054

Malware in sbrugna...

Malicious code in run-script-ganymede-npm-miranda (npm)

The package run-script-ganymede-npm-miranda was found to contain malicious code...

Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...