4531 matches found
EUVD-2025-120144
Malicious code in yaml-eslint-eslint-style-loader npm...
EUVD-2025-124095
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin npm...
EUVD-2025-120143
Malicious code in yaml-express-cors-gridsome npm...
EUVD-2025-113106
Malicious code in graphql-orbit-csrf-yaml npm...
Malicious code in rocket-yaml-vortex-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120149
Malicious code in yaml-aquarius-xenos-neptune npm...
EUVD-2025-123639
Malicious code in playwright-library-build-yaml npm...
EUVD-2025-113446
Malicious code in foundation-antares-yaml-vega npm...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122519
Malicious code in restart-yaml-celeste-writable npm...
EUVD-2025-121514
Malicious code in sync-antares-rehype-yaml npm...
EUVD-2025-111356
Malicious code in mdx-ariel-stream-yaml npm...
EUVD-2025-122199
Malicious code in scorpius-yaml-ignite-process npm...
MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139582 Malicious code in ariel-cluster-yaml-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef61cd59299c1e1e48712456761e4f094ccf8cc370ac9410fc8892b0e60bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112012
Malicious code in karma-deneb-umbra-yaml npm...
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
EUVD-2025-120140
Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...