535 matches found
EUVD-2025-120412
Malicious code in winston-ophiuchus-native-parcel npm...
EUVD-2025-113981
Malicious code in equinox-ophiuchus-winston-webdriverio npm...
MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124185
Malicious code in oauth-nextjs-winston-cli npm...
EUVD-2025-120400
Malicious code in winston-tethys-epimetheus-enif npm...
EUVD-2025-120404
Malicious code in winston-server-cassini-blaze npm...
EUVD-2025-115392
Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...
Malicious code in rehype-winston-octans-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f91c97d70b21b2ab730a7e4c783098a6ee475dfc3913443291cf3a6f257c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124775
Malicious code in mongodb-winston-jovian-eclipse npm...
EUVD-2025-114735
Malicious code in cygnus-module-browserify-winston npm...
MAL-2025-149523 Malicious code in winston-registry-miranda-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adc2ee2fc57b0b96c442dd9623b0bb7e158f3600ae026698c48e2cc04e98884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hapi-winston-halley-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149491 Malicious code in winston-eslint-config-impulse-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28014350609d845e34791b1fe1bba9b422e05f529a3222c889802154906250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139258 Malicious code in airbnb-module-winston-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145736 Malicious code in oauth-nextjs-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139746 Malicious code in auth0-event-winston-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca62e2d6414ed0efda22dc45da9e9f2d5b43e9efcbfa092dd84761726126c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...