1552 matches found
EUVD-2025-114926
Malicious code in cosmiconfig-google-commitlint-sagitta npm...
EUVD-2025-116076
Malicious code in blaze-morgan-phoenix-scorpius npm...
EUVD-2025-112978
Malicious code in halley-cressida-gacrux-hyperion npm...
EUVD-2025-113608
Malicious code in firebase-meissa-loopback-event npm...
Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cz-conventional-changelog-apollo-europa-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a374729d98d86f3613bd69ea8a7dab54201ac5cb5daddc4823cca64866c8c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115844
Malicious code in cache-aquarius-nodejs-middleware npm...
EUVD-2025-116670
Malicious code in antares-polaris-vuetify-wolf npm...
EUVD-2025-123423
Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...
EUVD-2025-111943
Malicious code in kinetic-europa-apex-sadr npm...
EUVD-2025-113173
Malicious code in global-karma-socketio-algol npm...
MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144520 Malicious code in loglevel-run-script-cross-env-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274bbe00f3f0fdea25171e1d9b6e8028893566b13e1a05f6160aae69d26a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149355 Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117000
Malicious code in visiting-black-caterpillar npm...
EUVD-2025-117235
Malicious code in mechanical-amber-panther npm...