4424 matches found
EUVD-2025-124848
Malicious code in mocha-chariklo-callback-pulsar npm...
EUVD-2025-112693
Malicious code in husky-global-lint-staged-callback npm...
EUVD-2025-121995
Malicious code in shelljs-sedna-kaus-callback npm...
EUVD-2025-116898
Malicious code in achernar-spinner-phoebe-callback npm...
EUVD-2025-121537
Malicious code in supervisor-callback-xo-gridsome npm...
EUVD-2025-115672
Malicious code in carpo-centauri-commitlint-config-angular-callback npm...
EUVD-2025-120247
Malicious code in xenos-magellan-callback-dotenv npm...
EUVD-2025-115806
Malicious code in callback-levels-cz-conventional-changelog-cache npm...
EUVD-2025-115787
Malicious code in callback-transform-zenith-node-config npm...
EUVD-2025-124150
Malicious code in octans-hyperion-callback-kaus npm...
Malicious code in webpack-dotenv-upgrade-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c14c5941a4916f942059840163dc3766f319a05cd42f18f3b96ca5beb4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xanadu-callback-request-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120797
Malicious code in version-callback-husky-castor npm...
MAL-2025-141061 Malicious code in configstore-publish-callback-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc0693eafa04b8a94047bef25c9cc975ce1f01682076e624ca0e6650756e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115805
Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown npm...
MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...