535 matches found
MAL-2025-146414 Malicious code in postcss-loader-winston-transport-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121227
Malicious code in toml-avior-nightmare-winston npm...
EUVD-2025-114606
Malicious code in deimos-readable-winston-yonder npm...
EUVD-2025-114952
Malicious code in corvus-levels-winston-apex npm...
EUVD-2025-120428
Malicious code in winston-jupiter-node-config-octans npm...
EUVD-2025-123922
Malicious code in pavo-hugo-winston-iota npm...
EUVD-2025-116907
Malicious code in achernar-draco-redis-winston npm...
EUVD-2025-120395
Malicious code in winston-yaml-webdriver-mocha-repository npm...
EUVD-2025-120393
Malicious code in winston-zephyr-nuxtjs-phoenix npm...
EUVD-2025-115148
Malicious code in commitlint-config-angular-cressida-nodejs-winston npm...
EUVD-2025-114836
Malicious code in cross-env-soap-winston-fomalhaut npm...
EUVD-2025-120422
Malicious code in winston-miranda-deimos-jupiter npm...
EUVD-2025-122106
Malicious code in selenium-warp-deneb-winston npm...
Malicious code in airbnb-module-winston-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122729
Malicious code in rehype-winston-webpack-iota npm...
EUVD-2025-113715
Malicious code in express-winston-yakutsk-halley npm...