257 matches found
EUVD-2025-179081
Malicious code in equinox-sedna-sequelize-convict npm...
EUVD-2025-178945
Malicious code in farout-convict-meteor-accretion npm...
EUVD-2025-178498
Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict npm...
EUVD-2025-176612
Malicious code in rocket-planetology-mira-convict npm...
EUVD-2025-178162
Malicious code in lacerta-paleobotany-convict-babel npm...
Malicious code in convict-spawn-gravitationalwave-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ganymede-webdriver-manager-convict-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9dd33aabe6b5b026655e8cc3da8627bbdf9d68cf9b8cd88bf86fd96847df16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179584
Malicious code in convict-quantum-hermes-enif npm...
EUVD-2025-176323
Malicious code in soap-callback-convict-middleware npm...
MAL-2025-186411 Malicious code in csrf-mutation-oauth-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186801 Malicious code in equinox-sedna-sequelize-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186298 Malicious code in convict-quantum-hermes-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf996ad2856885b1746d8ad7f02dbbaf7e4d0f0ead39b1688e7e449f4a6c576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112865
Malicious code in helmet-convict-mongoose-cz-conventional-changelog npm...
EUVD-2025-120450
Malicious code in winston-blaze-convict-luna npm...
EUVD-2025-123375
Malicious code in process-convict-auriga-magellan npm...
EUVD-2025-122701
Malicious code in release-it-convict-io-framework npm...
EUVD-2025-122929
Malicious code in quito-flare-convict-thuban npm...
EUVD-2025-123921
Malicious code in pavo-less-loader-convict-uglify-js npm...