369 matches found
Malicious code in ultra-dynamo-foundation-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115364
Malicious code in child-process-altair-convict-dynamo npm...
EUVD-2025-121212
Malicious code in toml-levels-dynamo-nodemon npm...
EUVD-2025-124507
Malicious code in nextjs-dynamo-gemini-version npm...
EUVD-2025-113360
Malicious code in gacrux-airbnb-dynamo-xenon npm...
EUVD-2025-123263
Malicious code in prompts-andromeda-dynamo-halley npm...
EUVD-2025-124545
Malicious code in neptune-pm2-dynamo-dotenv-safe npm...
EUVD-2025-111416
Malicious code in markdown-pdf-ophiuchus-lint-dynamo npm...
EUVD-2025-122414
Malicious code in rollup-plugin-antares-pulsar-dynamo npm...
EUVD-2025-111692
Malicious code in link-sails-promise-dynamo npm...
EUVD-2025-120183
Malicious code in xo-electron-builder-passport-dynamo npm...
EUVD-2025-113216
Malicious code in gemini-dynamo-mongodb-exec npm...
EUVD-2025-123789
Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin npm...
Malicious code in dynamo-winston-less-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114278
Malicious code in dynamo-nodemon-bulma-dependencies npm...
EUVD-2025-111837
Malicious code in leda-janus-solis-dynamo npm...
EUVD-2025-120491
Malicious code in weywot-gemini-dynamo-regulus npm...
Malicious code in build-configstore-kronos-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...