240 matches found
Malicious code in phoebe-sagitta-cosmiconfig-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175430
Malicious code in zenith-cosmiconfig-miranda-standard npm...
EUVD-2025-177206
Malicious code in phoebe-sagitta-cosmiconfig-got npm...
EUVD-2025-179550
Malicious code in cosmiconfig-xml-rehype-webpack npm...
EUVD-2025-180277
Malicious code in async-buffer-cosmiconfig-aquarius npm...
EUVD-2025-179678
Malicious code in colors-gravity-cosmiconfig-zephyr npm...
Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678fcb16a0b7adb4817edb4b06bec8c2c550bf2f68a2e83f948eed4985d886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179553
Malicious code in cosmiconfig-fermiparadox-parsec-forever npm...
EUVD-2025-177492
Malicious code in octans-non-blocking-repository-cosmiconfig npm...
EUVD-2025-179969
Malicious code in browserify-cosmiconfig-testcafe-await npm...
EUVD-2025-178309
Malicious code in janus-greatfilter-cosmiconfig-ursa npm...
EUVD-2025-176622
Malicious code in robotics-cosmiconfig-repository-metabolomics npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-179551
Malicious code in cosmiconfig-perseus-redgiant-apollo npm...
EUVD-2025-179554
Malicious code in cosmiconfig-deimos-kaus-hyperion npm...
Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178389
Malicious code in inquirer-winston-commitlint-cosmiconfig npm...
Malicious code in server-nebula-cosmiconfig-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...