4548 matches found
EUVD-2025-120130
Malicious code in yaml-polaris-loop-vuetify npm...
EUVD-2025-115242
Malicious code in colors-version-yaml-eclipse npm...
EUVD-2025-114832
Malicious code in cross-env-yaml-meteor-aurora npm...
EUVD-2025-112101
Malicious code in jsonp-vuetify-enif-yaml npm...
EUVD-2025-114783
Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml npm...
Malicious code in publish-stream-radiant-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120395
Malicious code in winston-yaml-webdriver-mocha-repository npm...
EUVD-2025-115736
Malicious code in canopus-proxima-yaml-puppeteer npm...
EUVD-2025-116434
Malicious code in atlas-yaml-ursa-eslint-config npm...
EUVD-2025-122166
Malicious code in sedna-carpo-yaml-server npm...
EUVD-2025-120139
Malicious code in yaml-kaus-polaris-dotenv npm...
EUVD-2025-114248
Malicious code in elara-aurora-yaml-ophiuchus npm...
EUVD-2025-120993
Malicious code in umbra-yaml-castor-axios npm...
Malicious code in cross-env-yaml-meteor-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114751
Malicious code in csv-sedna-epimetheus-yaml npm...
EUVD-2025-111738
Malicious code in library-fornax-start-yaml npm...
EUVD-2025-112068
Malicious code in juno-yaml-neptune-node-config npm...
Malicious code in browserify-winston-yaml-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1d5177935693defaa858303568bb9b915d0de3db14a9ae01287160689c3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...