MAL-2025-147867 Malicious code in sequelize-express-draco-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e2ad2be72b0c33bc8a00e331e47b3d7dc6ac9f9be3eb65feb42045e0ddd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-hapi-sequelize-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0efe0a8a15392fa00523436d0d0daba79cd82d686ca3b848145fea62b9885f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2019-0269

Malware in sbrugna...

EUVD-2019-0721

Malware in sbrugna...

EUVD-2019-0399

Malware in sbrugna...

EUVD-2019-0268

Malware in sbrugna...

EUVD-2019-0753

Malware in sbrugna...

EUVD-2017-0332

Malware in sbrugna...

EUVD-2019-0706

Malware in sbrugna...

EUVD-2019-0204

Malware in sbrugna...

EUVD-2023-0814

Malicious code in bioql PyPI...

EUVD-2023-0694

Malicious code in bioql PyPI...

EUVD-2022-7154

Malicious code in bioql PyPI...

EUVD-2023-2910

Malicious code in bioql PyPI...

EUVD-2023-0664

Malicious code in bioql PyPI...

EUVD-2023-0801

Malicious code in bioql PyPI...

Malicious code in graphql-sequelize-teselagen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61bd0f16d8ac09ad8d170113bc0bc5ed2cbba4f9d406fa9a852cface0b40be37 Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in eris-interferometry-astrochemistry-sequelize (npm)

The package eris-interferometry-astrochemistry-sequelize was found to contain malicious code...

Malicious code in barnard-sequelize-buffer-duplex (npm)

The package barnard-sequelize-buffer-duplex was found to contain malicious code...