10944 matches found
MAL-2025-146018 Malicious code in pegasus-backend-event-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb93c2961a0e31e61d9eb6bc66998990f5f61a176e8605fa5d1de03381cae1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123067
Malicious code in puppeteer-meissa-reveal-md-backend npm...
MAL-2025-145428 Malicious code in nightmare-backend-babel-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91103deb94c614fbd1a4df900ba457667e63c12a896906cbb59532aa2c131aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116203
Malicious code in backend-yildun-fornax-shelljs npm...
MAL-2025-148653 Malicious code in thuban-graphql-backend-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116211
Malicious code in backend-mongodb-pino-pretty-grus npm...
EUVD-2025-120321
Malicious code in xanadu-server-backend-google npm...
EUVD-2025-112678
Malicious code in hydra-bellatrix-backend-sadr npm...
EUVD-2025-123930
Malicious code in pavo-backend-neptune-semantic-release npm...
EUVD-2025-116216
Malicious code in backend-exec-readable-vulcan npm...
EUVD-2025-111908
Malicious code in koa-request-backend-cors npm...
EUVD-2025-121275
Malicious code in thuban-graphql-backend-jupiter npm...
EUVD-2025-116204
Malicious code in backend-wasat-ceres-fusion npm...
Malicious code in google-backend-lyra-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b28cb62fe2a152557a0284558db91baf5657ae5209dfe3be3c536704defb5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111833
Malicious code in leda-mini-css-extract-plugin-backend-radiant npm...
EUVD-2025-114247
Malicious code in elara-backend-mira-corvus npm...
EUVD-2025-116225
Malicious code in backend-andromeda-chakra-ui-callback npm...
EUVD-2025-116223
Malicious code in backend-build-dorado-antares npm...