535 matches found
Malicious code in winston-telesto-update-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b0f31224fe8724da5f01db3414046e77f8b195722134872776dde5942a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120442
Malicious code in winston-dione-playwright-slides npm...
EUVD-2025-115826
Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx npm...
EUVD-2025-114573
Malicious code in deneb-celeste-grus-winston npm...
EUVD-2025-124176
Malicious code in oberon-firebase-jupiter-winston npm...
EUVD-2025-115224
Malicious code in comet-parcel-gacrux-winston npm...
EUVD-2025-120454
Malicious code in winston-antares-lyra-javascript npm...
Malicious code in winston-antd-corvus-scorpius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-heka-loglevel-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120419
Malicious code in winston-mui-corvus-gravity npm...
EUVD-2025-111936
Malicious code in kinetic-mini-css-extract-plugin-winston-spectron npm...
EUVD-2025-114772
Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe npm...
EUVD-2025-115923
Malicious code in build-altair-winston-cli npm...
Malicious code in dione-subscription-winston-helios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee660994a62fdbc5057c92951e6a2739b653f0b4ae38c2fef9fdced410d1b7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111591
Malicious code in loglevel-xenos-norma-winston npm...
EUVD-2025-114737
Malicious code in cygnus-karma-prettier-plugin-markdown-winston npm...
EUVD-2025-116080
Malicious code in blaze-grus-cross-env-winston npm...
Malicious code in vuepress-winston-middleware-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8309a318511aca365817442dc6e688949b3c20e8a4fe41511579f3dfd9b29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...