369 matches found
EUVD-2025-120727
Malicious code in vuetify-alphard-dynamo-module npm...
EUVD-2025-114269
Malicious code in dynamo-spectron-proxima-dagda npm...
EUVD-2025-122657
Malicious code in repository-dynamo-yonder-bunyan npm...
EUVD-2025-113457
Malicious code in fornax-terser-webpack-plugin-sedna-dynamo npm...
EUVD-2025-120261
Malicious code in xenon-virgo-dynamo-async npm...
EUVD-2025-113656
Malicious code in fetch-pyxis-inquirer-dynamo npm...
EUVD-2025-120441
Malicious code in winston-dynamo-axios-neptune npm...
EUVD-2025-121037
Malicious code in ultra-dynamo-foundation-install npm...
EUVD-2025-113083
Malicious code in gravity-react-bootstrap-commitlint-dynamo npm...
Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121611
Malicious code in stream-dynamo-sass-loader-google npm...
EUVD-2025-112109
Malicious code in jsonp-pegasus-metalsmith-dynamo npm...
Malicious code in eclipse-dotenv-sagitta-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d0062ecba0912e47bbf94075c797d1732298e682066a48aaee95cdc99b2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116119
Malicious code in betelgeuse-hapi-dynamo-scripts npm...
EUVD-2025-114279
Malicious code in dynamo-meteor-slides-elektra npm...
EUVD-2025-112930
Malicious code in hapi-dynamo-janus-altair npm...
EUVD-2025-120934
Malicious code in update-dynamo-cypress-karma npm...
Malicious code in dynamo-spectron-proxima-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...