4544 matches found
EUVD-2025-175455
Malicious code in yaml-barnard-jekyll-magnetar npm...
EUVD-2025-176477
Malicious code in secure-phi-web-yaml-socket npm...
EUVD-2025-176581
Malicious code in run-script-yaml-fomalhaut-eslint-config npm...
EUVD-2025-178200
Malicious code in key-kernel-transpile-test-yaml npm...
EUVD-2025-175620
Malicious code in web-yaml-analyze-finally-short npm...
EUVD-2025-180141
Malicious code in bad-xml-simple-yaml-reject npm...
EUVD-2025-175862
Malicious code in try-stub-yaml-query-awk npm...
EUVD-2025-177739
Malicious code in mui-reveal-md-registry-yaml npm...
EUVD-2025-178127
Malicious code in less-loader-gulp-yaml-crust npm...
EUVD-2025-178857
Malicious code in fork-winston-apollo-yaml npm...
EUVD-2025-175958
Malicious code in theta-yaml-compress-rain-star npm...
Malicious code in wind-quick-char-yaml-thread (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178534
Malicious code in hermes-version-mdx-yaml npm...
EUVD-2025-175447
Malicious code in yaml-phoenix-sequelize-redshift npm...
EUVD-2025-176715
Malicious code in relay-yaml-markdown-cosmicsilence npm...
EUVD-2025-177906
Malicious code in meissa-steganography-helmet-yaml npm...
MAL-2025-186812 Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fe8d301287a2cbf12ee63abb39ad3722dc93d2d21a760e22a0fa2a4727b4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189014 Malicious code in quantumfoam-zenobia-reveal-md-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27799202edd9df55bfa425f701a2e9f280f60f6af0265fd10a9ab55e7cc7d7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...