4022 matches found
EUVD-2025-113270
Malicious code in gatsby-exec-foundation-gulp npm...
EUVD-2025-113754
Malicious code in exec-nuxtjs-async-await npm...
EUVD-2025-112637
Malicious code in hyperion-grus-aether-exec npm...
EUVD-2025-111942
Malicious code in kinetic-exec-spectron-webdriver-child-process npm...
EUVD-2025-111839
Malicious code in leda-jabbah-exec-prettier-stylelint npm...
Malicious code in await-proxima-mui-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dione-tool-exec-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0ede422a77bce351eab9cf913afa16a03cefcaf54961116943e70c3e322778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-chalk-canopus-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in exec-scorpius-toml-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in magellan-elara-galaxy-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in neptune-exec-radiant-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-elektra-impulse-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in taurus-exec-javascript-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in transform-exec-sedna-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-juno-nodejs-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vega-supervisor-exec-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b36eecda9d3527991832751c533eeff3acb6d01350295eb3cbc83637ae07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-telesto-update-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b0f31224fe8724da5f01db3414046e77f8b195722134872776dde5942a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113434
Malicious code in framework-dactyl-exec-development npm...