195 matches found
Malicious Package
Overview leda-envconfig-odin-sass-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview bellatrix-titan-eslint-config-envconfig is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
Malicious Package
Overview github.com/BufferZoneCorp/go-envconfig is a malicious package. This package contains malicious code designed to compromise developer systems and CI environments, specifically targeting GitHub Actions. The threat actor, operating under the GitHub account BufferZoneCorp, published a cluste...
MAL-2026-3621 Malicious code in github.com/BufferZoneCorp/go-envconfig (Go)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...
Malicious code in draco-quasarjet-envconfig-technocracy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e035ec30a3e6a4899aece76133701fceaa81f84eb4de4b1f3e1a6500c33e84ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177144
Malicious code in planckscale-ora-envconfig-antares npm...
EUVD-2025-177135
Malicious code in planetology-virgo-archaeometry-envconfig npm...
EUVD-2025-177860
Malicious code in meteor-envconfig-quito-singularitarianism npm...
EUVD-2025-179111
Malicious code in envconfig-apollo-dependencies-update npm...
EUVD-2025-179109
Malicious code in envconfig-fornax-void-duplex npm...
EUVD-2025-179015
Malicious code in europa-betelgeuse-scorpius-envconfig npm...
EUVD-2025-178912
Malicious code in figures-proxima-sedna-envconfig npm...
EUVD-2025-180446
Malicious code in alphard-mui-gatsby-envconfig npm...
EUVD-2025-180048
Malicious code in biosignature-spawn-slidev-envconfig npm...
EUVD-2025-179240
Malicious code in draco-quasarjet-envconfig-technocracy npm...
EUVD-2025-180169
Malicious code in axios-envconfig-antimatter-xenos npm...
Malicious code in envconfig-apollo-dependencies-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6efee11ebc8382fbece0fc1803392ff0837ae4af2341841d4b417793e252fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178730
Malicious code in geoarchaeology-ethology-command-envconfig npm...