5783 matches found
EUVD-2025-124617
Malicious code in nconf-apollo-ursa-callback npm...
EUVD-2025-113507
Malicious code in fornax-airbnb-callback-stream npm...
Malicious code in callback-run-script-html-webpack-plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122906
Malicious code in radiant-mira-cypress-callback npm...
EUVD-2025-115792
Malicious code in callback-run-script-html-webpack-plugin-server npm...
EUVD-2025-112093
Malicious code in juno-callback-pegasus-xanadu npm...
EUVD-2025-112838
Malicious code in hercules-ceres-jest-callback npm...
EUVD-2025-120497
Malicious code in weywot-callback-native-standard npm...
Malicious code in cors-chakra-ui-norma-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122579
Malicious code in rest-command-callback-command npm...
EUVD-2025-115802
Malicious code in callback-package-tethys-less-loader npm...
EUVD-2025-115794
Malicious code in callback-restart-spawn-cordelia npm...
Malicious code in meteor-foundation-callback-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158cc65ad87381b4a564c458d959004d7496c8d9fb16a7a1070b0685ea9fef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in got-rocket-build-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113585
Malicious code in flare-grunt-sass-loader-callback npm...
EUVD-2025-115667
Malicious code in carpo-frontend-callback-gacrux npm...
EUVD-2025-115063
Malicious code in configstore-callback-redis-gemini npm...
EUVD-2025-115566
Malicious code in centaurus-bootstrap-callback-webpack npm...