5043 matches found
Malicious code in hapi-run-script-draco-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f52ceb1b572a541bb3ce44c44f647500abd52b1015c97b8a6e7de1ea336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-run-script-scripts-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pm2-run-script-eslint-plugin-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in run-script-nconf-hermes-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sails-cosmos-run-script-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4dcef092d4e4e3992f67dde330353e4a21f4715c8c58e5e8e6fee3efcb84f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in thuban-run-script-callback-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xanadu-run-script-ceres-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113126
Malicious code in got-run-script-proxima-await npm...
EUVD-2025-112914
Malicious code in hapi-run-script-draco-hermes npm...
EUVD-2025-112895
Malicious code in heka-run-script-norma-mongodb npm...
EUVD-2025-113516
Malicious code in fork-run-script-json-bootstrap npm...
EUVD-2025-114390
Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...
EUVD-2025-114273
Malicious code in dynamo-run-script-nashira-markdownlint npm...
EUVD-2025-114043
Malicious code in enif-xanthus-spinner-run-script npm...
EUVD-2025-115110
Malicious code in commitlint-zenobia-run-script-superagent npm...
EUVD-2025-116586
Malicious code in apollo-indus-run-script-lyra npm...
EUVD-2025-116392
Malicious code in aurora-run-script-ophiuchus-rehype npm...