271 matches found
EUVD-2025-120359
Malicious code in writable-mongoose-dagda-library npm...
EUVD-2025-121942
Malicious code in slides-callisto-pegasus-dagda npm...
EUVD-2025-121913
Malicious code in slidev-postcss-loader-non-blocking-dagda npm...
EUVD-2025-123173
Malicious code in proxima-wezen-jabbah-dagda npm...
EUVD-2025-116726
Malicious code in andromeda-dagda-mui-xenon npm...
EUVD-2025-114595
Malicious code in delphinus-dotenv-safe-dagda-antares npm...
EUVD-2025-123726
Malicious code in phoenix-fornax-dagda-release-it npm...
EUVD-2025-114552
Malicious code in deneb-restart-dagda-cache npm...
EUVD-2025-113879
Malicious code in eslint-plugin-element-ui-hyperion-dagda npm...
EUVD-2025-121753
Malicious code in spica-oauth-dagda-vuetify npm...
Malicious code in colors-element-ui-dagda-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114645
Malicious code in dagda-castor-xo-callback npm...
Malicious code in warp-dagda-antd-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123044
Malicious code in pyxis-helmet-dagda-halley npm...
EUVD-2025-113349
Malicious code in gacrux-dagda-koa-css-loader npm...
EUVD-2025-114638
Malicious code in dagda-heka-phoebe-quantum npm...
EUVD-2025-112427
Malicious code in install-spinner-dagda-fusion npm...
Malicious code in dagda-resolvers-express-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a92d36a069c5febb5db84af1665e4412342f0c0fd6ffc310f5b08d0b7e1753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...