4424 matches found
EUVD-2025-115790
Malicious code in callback-semantic-ui-pulsar-telesto npm...
EUVD-2025-114574
Malicious code in deneb-callback-terser-wasat npm...
EUVD-2025-115788
Malicious code in callback-spica-rollup-schema npm...
EUVD-2025-115048
Malicious code in configstore-publish-callback-atlas npm...
EUVD-2025-123211
Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...
EUVD-2025-121488
Malicious code in tailwindcss-callback-andromeda-umbra npm...
EUVD-2025-114319
Malicious code in draco-callback-gacrux-sirius npm...
EUVD-2025-124289
Malicious code in non-blocking-xml-procyon-callback npm...
EUVD-2025-124024
Malicious code in ora-sagitta-callback-markdown-pdf npm...
EUVD-2025-122586
Malicious code in resolvers-sedna-callback-vuepress npm...
Malicious code in native-magellan-despina-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-callback-algol-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115799
Malicious code in callback-process-upgrade-auth npm...
EUVD-2025-122261
Malicious code in sass-loader-callback-oauth-sagitta npm...
EUVD-2025-115795
Malicious code in callback-request-subscription-titan npm...
EUVD-2025-115813
Malicious code in callback-antd-transport-install npm...
Malicious code in dagda-castor-xo-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114515
Malicious code in despina-event-callback-arcturus npm...
Malicious code in callback-venus-flare-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...