1017 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-179498
Malicious code in cross-env-native-centaurus-dynamo npm...
EUVD-2025-175808
Malicious code in unuk-hapi-cross-env-nashira npm...
Malicious code in hapi-cross-env-subduction-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40ef79d55d711a81f41e27b0ebbed64b13ba05ad6e7de94c557da9e8c1ea416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179497
Malicious code in cross-env-package-rimraf-antares npm...
Malicious code in cross-env-dorado-eslint-config-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in karma-cross-env-mocha-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179479
Malicious code in cryptography-cross-env-google-yildun npm...
EUVD-2025-178884
Malicious code in flare-sirius-parallax-cross-env npm...
EUVD-2025-180226
Malicious code in auth0-andromeda-heka-cross-env npm...
EUVD-2025-176822
Malicious code in radiant-cross-env-neutrino-local npm...
MAL-2025-186379 Malicious code in cross-env-cross-env-photon-superposition (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb2fb8727e1f7724d5accad4dc8d450ac3e5735b535600cb2fee7ed81e14ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186378 Malicious code in cross-env-atlas-thuban-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123d82a3501a08158da19efd0782a7ccf3a05e357e6549c278b82303abf98bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187666 Malicious code in karma-cross-env-mocha-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179503
Malicious code in cross-env-cross-env-photon-superposition npm...
Malicious code in cross-env-cybernetics-juno-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...