5518 matches found
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
Malicious code in commitlint-dependencies-loopback-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116534
Malicious code in arcturus-dependencies-transport-child-process npm...
EUVD-2025-114536
Malicious code in dependencies-local-lint-spinner npm...
EUVD-2025-113075
Malicious code in gridsome-dependencies-hugo-ganymede npm...
Malicious code in mocha-ganymede-dependencies-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbf7f214a0fd32e6dffcfce3cd4db712ae91ae3fc1f73988bdf26b98e0d7c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122332
Malicious code in sagitta-dependencies-helios-kinetic npm...
EUVD-2025-114530
Malicious code in dependencies-request-private-gridsome npm...
EUVD-2025-123100
Malicious code in publish-webpack-configstore-dependencies npm...
EUVD-2025-114539
Malicious code in dependencies-install-xenon-venus npm...
EUVD-2025-113989
Malicious code in equinox-geckodriver-helmet-dependencies npm...
EUVD-2025-120822
Malicious code in venus-dependencies-ceres-yonder npm...
EUVD-2025-121602
Malicious code in stream-lint-magellan-dependencies npm...
EUVD-2025-122660
Malicious code in repository-dependencies-hydra-async npm...
EUVD-2025-123603
Malicious code in pm2-zenobia-dependencies-phoebe npm...
EUVD-2025-123432
Malicious code in prettier-plugin-markdown-nebula-indus-dependencies npm...
EUVD-2025-114847
Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...
Malicious code in uninstall-apollo-gacrux-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5519f459b0ae7839ec0ab31389af3597e630d33968dd80b319073346517cae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...