278285 matches found
EUVD-2025-114926
Malicious code in cosmiconfig-google-commitlint-sagitta npm...
EUVD-2025-112237
Malicious code in javascript-await-upgrade-venus npm...
Malicious code in cz-conventional-changelog-apollo-europa-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a374729d98d86f3613bd69ea8a7dab54201ac5cb5daddc4823cca64866c8c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ganymede-luna-solis-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delphinus-leda-polaris-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146987 Malicious code in quito-apollo-europa-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4eb6051a4b9dbc341e909f1b7140e2b5d8827337159c41ee2252851b56fe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116670
Malicious code in antares-polaris-vuetify-wolf npm...
EUVD-2025-112978
Malicious code in halley-cressida-gacrux-hyperion npm...
EUVD-2025-123423
Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...
Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112349
Malicious code in izar-subscription-bootes-kinetic npm...
EUVD-2025-113868
Malicious code in eslint-plugin-spectron-csv-aether npm...
Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111943
Malicious code in kinetic-europa-apex-sadr npm...
EUVD-2025-116497
Malicious code in astro-geckodriver-janus-helios npm...
EUVD-2025-115739
Malicious code in canopus-pavo-hexo-metalsmith npm...