255 matches found
EUVD-2025-123838
Malicious code in perseus-epimetheus-convict-unuk npm...
EUVD-2025-111827
Malicious code in leda-prettier-antd-convict npm...
EUVD-2025-121782
Malicious code in spectron-webdriver-typeorm-xanthus-convict npm...
EUVD-2025-115621
Malicious code in castor-kronos-jwt-convict npm...
Malicious code in cors-equinox-convict-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830bba97b38273c827dfbc347dbec50ed18767cbe6e901b55fd0fa9562f540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in convict-jsonp-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122060
Malicious code in sequelize-convict-wasat-antares npm...
Malicious code in mira-convict-element-ui-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2a6d456fbc4d3913a24553e903f83cb7fd4e63c4e3f8e5a5860b913c4a9b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116155
Malicious code in bellatrix-oberon-halley-convict npm...
EUVD-2025-115025
Malicious code in convict-promise-transform-weywot npm...
EUVD-2025-115016
Malicious code in convict-telesto-fomalhaut-canopus npm...
EUVD-2025-114933
Malicious code in cosmiconfig-convict-despina-nuxtjs npm...
EUVD-2025-112834
Malicious code in hercules-convict-indus-flare npm...
Malicious code in titan-scripts-convict-terser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d6c94de782bd034dd89655e2e459bd5ac76b94c8c5da3039e15a6583103ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bootstrap-comet-convict-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113345
Malicious code in gacrux-google-build-convict npm...
EUVD-2025-121030
Malicious code in ultra-hyperion-cors-convict npm...
EUVD-2025-114989
Malicious code in cors-equinox-convict-rollup-plugin npm...