2696 matches found
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
EUVD-2025-116534
Malicious code in arcturus-dependencies-transport-child-process npm...
EUVD-2025-113934
Malicious code in eris-meteor-dependencies-halley npm...
EUVD-2025-113075
Malicious code in gridsome-dependencies-hugo-ganymede npm...
EUVD-2025-114531
Malicious code in dependencies-radiant-centaurus-lyra npm...
EUVD-2025-122806
Malicious code in redis-version-dependencies-zephyr npm...
EUVD-2025-122811
Malicious code in redis-phoenix-dependencies-ceres npm...
EUVD-2025-122692
Malicious code in release-it-phoenix-node-sass-dependencies npm...
EUVD-2025-122265
Malicious code in sails-terser-bulma-dependencies npm...
Malicious code in hyperion-dependencies-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-local-lint-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1252175578f0b4e994a71fcbd5f3ba442903b902ccc88eef60da0b74d7c8b434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112011
Malicious code in karma-dependencies-geckodriver-sirius npm...
EUVD-2025-112726
Malicious code in hugo-dependencies-quantum-janus npm...
EUVD-2025-122072
Malicious code in semantic-ui-leda-dependencies-rate-limiter npm...
EUVD-2025-114816
Malicious code in csrf-postcss-dependencies-upgrade npm...
EUVD-2025-114522
Malicious code in dependencies-upgrade-request-celeste npm...
EUVD-2025-120822
Malicious code in venus-dependencies-ceres-yonder npm...
MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141569 Malicious code in dependencies-hugo-phenomic-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...