228 matches found
MAL-2025-186073 Malicious code in ceres-petrology-callisto-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef236e8eb1b727325a3aa33594675cd45f7056b4eeb66de2ec6f4c3717e7eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116408
Malicious code in auriga-zephyr-cosmiconfig-shelljs npm...
EUVD-2025-116663
Malicious code in antares-shelljs-vega-version npm...
EUVD-2025-123000
Malicious code in quark-colors-auth0-shelljs npm...
EUVD-2025-111441
Malicious code in magellan-webdriverio-shelljs-inquirer npm...
EUVD-2025-124745
Malicious code in morgan-duplex-shelljs-odin npm...
EUVD-2025-112618
Malicious code in hyperion-pino-pretty-levels-shelljs npm...
EUVD-2025-115000
Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...
EUVD-2025-122015
Malicious code in shelljs-ariel-ophiuchus-sails npm...
EUVD-2025-111231
Malicious code in metalsmith-nashira-antares-shelljs npm...
Malicious code in shelljs-sagitta-forever-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121997
Malicious code in shelljs-prompts-meteor-pavo npm...
EUVD-2025-116413
Malicious code in auriga-shelljs-titan-janus npm...
EUVD-2025-112723
Malicious code in hugo-io-commitizen-shelljs npm...
EUVD-2025-113955
Malicious code in eridanus-shelljs-oberon-epimetheus npm...
EUVD-2025-120854
Malicious code in ursa-shelljs-buffer-rimraf npm...
EUVD-2025-123208
Malicious code in proxima-figures-axios-shelljs npm...
Malicious code in shelljs-csv-antares-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...