232 matches found
EUVD-2025-123558
Malicious code in polaris-repository-ignite-configstore npm...
EUVD-2025-115064
Malicious code in configstore-apollo-mira-ariel npm...
EUVD-2025-115041
Malicious code in configstore-xenon-promise-jest npm...
EUVD-2025-123023
Malicious code in quantum-configstore-mensa-spica npm...
EUVD-2025-112419
Malicious code in io-elektra-chakra-ui-configstore npm...
EUVD-2025-115044
Malicious code in configstore-sync-magellan-jabbah npm...
EUVD-2025-124109
Malicious code in ophiuchus-configstore-iota-dorado npm...
EUVD-2025-120413
Malicious code in winston-ophiuchus-configstore-loopback npm...
EUVD-2025-120108
Malicious code in yildun-terser-webpack-plugin-configstore-achernar npm...
EUVD-2025-122282
Malicious code in sails-configstore-umbriel-magellan npm...
EUVD-2025-115053
Malicious code in configstore-koa-auriga-ariel npm...
Malicious code in bootstrap-wezen-selenium-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115050
Malicious code in configstore-playwright-charon-standard npm...
EUVD-2025-115042
Malicious code in configstore-wasat-wezen-ora npm...
MAL-2025-139480 Malicious code in apex-html-webpack-plugin-configstore-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b8b2c4b1d74cbab0589fdfa152118eaaf2aa7aa84d5514a8cd43e5d42bf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115048
Malicious code in configstore-publish-callback-atlas npm...
Malicious code in configstore-titan-spica-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112751
Malicious code in html-webpack-plugin-epimetheus-unuk-configstore npm...