535 matches found
EUVD-2025-116066
Malicious code in blaze-winston-mensa-betelgeuse npm...
EUVD-2025-113946
Malicious code in eris-carpo-changelog-winston npm...
EUVD-2025-124725
Malicious code in mui-altair-winston-equinox npm...
EUVD-2025-121617
Malicious code in stop-winston-bulma-metalsmith npm...
EUVD-2025-120453
Malicious code in winston-antd-corvus-scorpius npm...
EUVD-2025-120402
Malicious code in winston-sqlite-typeorm-quantum npm...
MAL-2025-147193 Malicious code in rehype-winston-webpack-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145655 Malicious code in nova-configstore-envconfig-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141273 Malicious code in cross-env-soap-winston-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149493 Malicious code in winston-farout-heka-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ed0798bc65f6397f3a98555c061206cd8d29c3eb7dfabae22c56a5d8d034c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149483 Malicious code in winston-cassini-mutation-orbit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141822 Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146414 Malicious code in postcss-loader-winston-transport-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...