5783 matches found
EUVD-2025-112553
Malicious code in indus-callback-achernar-dorado npm...
EUVD-2025-115786
Malicious code in callback-vega-ganymede-yildun npm...
Malicious code in magellan-mongodb-fornax-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70598d3f2d4714da0773553f94b820f5a8c58a903b861bd575151ebcd7b0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123146
Malicious code in publish-browserify-callback-await npm...
EUVD-2025-115021
Malicious code in convict-rehype-callback-npm npm...
EUVD-2025-116461
Malicious code in atlas-callback-xenos-janus npm...
EUVD-2025-115299
Malicious code in cli-rimraf-callback-exec npm...
EUVD-2025-122479
Malicious code in rimraf-arcturus-callback-meissa npm...
EUVD-2025-115783
Malicious code in callback-webpack-halley-eridanus npm...
EUVD-2025-115239
Malicious code in comet-callback-eridanus-ini npm...
EUVD-2025-115810
Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...
EUVD-2025-115793
Malicious code in callback-reveal-md-xml-shelljs npm...
EUVD-2025-121995
Malicious code in shelljs-sedna-kaus-callback npm...
EUVD-2025-115806
Malicious code in callback-levels-cz-conventional-changelog-cache npm...
EUVD-2025-123779
Malicious code in phoebe-callback-javascript-sequelize npm...
EUVD-2025-112693
Malicious code in husky-global-lint-staged-callback npm...
Malicious code in xanadu-callback-request-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...