EUVD-2025-111745

Malicious code in levels-yaml-build-shelljs npm...

EUVD-2025-122003

Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint npm...

EUVD-2025-122206

Malicious code in scorpius-shelljs-jekyll-meissa npm...

EUVD-2025-122000

Malicious code in shelljs-nightmare-perseus-elektra npm...

EUVD-2025-121993

Malicious code in shelljs-ultra-venus-stop npm...

EUVD-2025-122959

Malicious code in quasar-xanadu-ophiuchus-shelljs npm...

Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122013

Malicious code in shelljs-chai-remark-delphinus npm...

EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146738 Malicious code in proxima-shelljs-rate-limiter-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3dc1868def93642482dc1cde7445a3203c79d579a7682f4e895658766993e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140120 Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141329 Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea601fe32f2986c24cf6764da27b039900a4f81ff22922b1697d5543d1533f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2022-0448

Malicious code in bioql PyPI...

MAL-2025-43829 Malicious code in cli-shelljs-exoplanetology-indus (npm)

The package cli-shelljs-exoplanetology-indus was found to contain malicious code...

Malicious code in shelljs-quasarjet-cryovolcano-stop (npm)

The package shelljs-quasarjet-cryovolcano-stop was found to contain malicious code...

Malicious code in shelljs-neptunology-pegasus-sedna (npm)

The package shelljs-neptunology-pegasus-sedna was found to contain malicious code...