535 matches found
EUVD-2025-114323
Malicious code in dotenv-winston-yakutsk-csrf npm...
MAL-2025-146246 Malicious code in pino-pretty-winston-json-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122729
Malicious code in rehype-winston-webpack-iota npm...
MAL-2025-149482 Malicious code in winston-cache-stop-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140799 Malicious code in cli-geckodriver-sirius-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e1410ae9b38e65f7afbdffabb2ae9666d120b7fd9146797cb25adf35a46ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149496 Malicious code in winston-gulp-test-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f63b35e35336a3a9fdd43cb982b8e17fbfbb1cc799341655eb1ea37467d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Package
Overview node-winston is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview winston-log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious Package
Overview node-winston-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview safe-winston is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview winston-datalog is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2020-8218
Malware in sbrugna...
EUVD-2020-8224
Malware in sbrugna...
EUVD-2020-8220
Malware in sbrugna...
EUVD-2020-8219
Malware in sbrugna...
EUVD-2020-8217
Malware in sbrugna...
EUVD-2020-8222
Malware in sbrugna...