191 matches found
Malicious code in run-script-nconf-hermes-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122817
Malicious code in redis-izar-react-bootstrap-run-script npm...
Malicious code in dynamo-run-script-nashira-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116392
Malicious code in aurora-run-script-ophiuchus-rehype npm...
EUVD-2025-115110
Malicious code in commitlint-zenobia-run-script-superagent npm...
EUVD-2025-113126
Malicious code in got-run-script-proxima-await npm...
MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111595
Malicious code in loglevel-run-script-cross-env-superagent npm...
EUVD-2025-122383
Malicious code in run-script-bulma-jupiter-magellan npm...
EUVD-2025-116586
Malicious code in apollo-indus-run-script-lyra npm...
EUVD-2025-116741
Malicious code in altair-pulsar-run-script-procyon npm...
EUVD-2025-120716
Malicious code in vuetify-loop-convict-run-script npm...
EUVD-2025-122375
Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...
EUVD-2025-124196
Malicious code in oauth-corvus-atlas-run-script npm...
EUVD-2025-122739
Malicious code in rehype-run-script-soap-process npm...
EUVD-2025-120322
Malicious code in xanadu-run-script-ceres-loopback npm...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
Malicious code in got-run-script-proxima-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...