547 matches found
EUVD-2025-112449
Malicious code in inquirer-tailwindcss-sqlite-sirius npm...
Malicious code in webpack-sirius-remark-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121948
Malicious code in sirius-sedna-sass-loader-mongoose npm...
EUVD-2025-123681
Malicious code in pino-pretty-markdown-pdf-altair-sirius npm...
EUVD-2025-121974
Malicious code in sirius-fornax-process-typeorm npm...
EUVD-2025-112397
Malicious code in iota-configstore-sirius-tailwindcss npm...
EUVD-2025-111663
Malicious code in lint-staged-deimos-alphard-sirius npm...
EUVD-2025-123677
Malicious code in pino-pretty-sirius-query-lynx npm...
EUVD-2025-114366
Malicious code in dotenv-safe-astro-sirius-sedna npm...
MAL-2025-139187 Malicious code in acamar-sirius-janus-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e2d475400fa7007a588d6df6a05d45075c6cf65f9a5f9ad3b00da0e5db62f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112778
Malicious code in hermes-xml-auth0-sirius npm...
EUVD-2025-114319
Malicious code in draco-callback-gacrux-sirius npm...
EUVD-2025-121951
Malicious code in sirius-resolvers-quantum-rollup-plugin npm...
EUVD-2025-115627
Malicious code in castor-alphard-sirius-cordelia npm...
Malicious code in sirius-standard-mensa-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f9a6f0c3f9b13e89a3dc3ede03cf3da159585fe7b70397f5ffe65a67f99d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114889
Malicious code in cosmos-sirius-elektra-eslint npm...
EUVD-2025-120455
Malicious code in wezen-yakutsk-semantic-release-sirius npm...
EUVD-2025-122928
Malicious code in quito-hermes-mysql-sirius npm...
Malicious code in soap-sass-loader-sirius-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...