258 matches found
MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122004
Malicious code in shelljs-luna-sadr-wezen npm...
EUVD-2025-122206
Malicious code in scorpius-shelljs-jekyll-meissa npm...
EUVD-2025-124010
Malicious code in orbit-pegasus-sync-shelljs npm...
EUVD-2025-111179
Malicious code in meteor-shelljs-miranda-oauth npm...
EUVD-2025-121993
Malicious code in shelljs-ultra-venus-stop npm...
EUVD-2025-112469
Malicious code in inquirer-cosmos-sqlite-shelljs npm...
Malicious code in backend-yildun-fornax-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delphinus-ariel-apex-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remark-shelljs-phoenix-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in shelljs-sagitta-forever-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112723
Malicious code in hugo-io-commitizen-shelljs npm...
EUVD-2025-114789
Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict npm...
EUVD-2025-115822
Malicious code in cache-shelljs-europa-kinetic npm...
EUVD-2025-115789
Malicious code in callback-shelljs-antares-pavo npm...
EUVD-2025-116663
Malicious code in antares-shelljs-vega-version npm...
EUVD-2025-122015
Malicious code in shelljs-ariel-ophiuchus-sails npm...