255 matches found
EUVD-2025-179245
Malicious code in draco-convict-carina-superagent npm...
EUVD-2025-178307
Malicious code in janus-mysql-delphinus-convict npm...
EUVD-2025-179583
Malicious code in convict-spawn-gravitationalwave-stream npm...
Malicious code in ganymede-webdriver-manager-convict-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9dd33aabe6b5b026655e8cc3da8627bbdf9d68cf9b8cd88bf86fd96847df16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179587
Malicious code in convict-axios-cosmogenic-miranda npm...
EUVD-2025-179490
Malicious code in cryonics-convict-tectonophysics-interstellarmedium npm...
EUVD-2025-176324
Malicious code in soap-auth0-tailwindcss-convict npm...
EUVD-2025-176930
Malicious code in publish-alphard-convict-halley npm...
EUVD-2025-178066
Malicious code in lint-staged-reveal-md-electron-convict npm...
EUVD-2025-178945
Malicious code in farout-convict-meteor-accretion npm...
EUVD-2025-178498
Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict npm...
EUVD-2025-179581
Malicious code in convict-ultra-paleoceanography-carpo npm...
MAL-2025-186411 Malicious code in csrf-mutation-oauth-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179580
Malicious code in convict-writable-webpack-cosmogenic npm...
EUVD-2025-179170
Malicious code in element-ui-commitlint-convict-chai npm...
EUVD-2025-176323
Malicious code in soap-callback-convict-middleware npm...
EUVD-2025-180406
Malicious code in antimatter-exoplanetology-convict-update npm...
Malicious code in convict-writable-webpack-cosmogenic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97564ab9fc4db43f4230b9d93ccc412d62ff1b73b25e6ee7eeca8c3f4298df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...