236 matches found
Malicious code in build-quantum-alphard-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113635
Malicious code in figures-orbit-uglify-js-uglify-js npm...
EUVD-2025-120044
Malicious code in zephyr-less-io-figures npm...
EUVD-2025-116425
Malicious code in auriga-figures-karma-ursa npm...
EUVD-2025-113633
Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...
EUVD-2025-120973
Malicious code in uninstall-figures-epimetheus-auriga npm...
EUVD-2025-112954
Malicious code in halley-ophiuchus-markdownlint-figures npm...
EUVD-2025-112157
Malicious code in jovian-pegasus-fork-figures npm...
EUVD-2025-115723
Malicious code in capella-corvus-hercules-figures npm...
EUVD-2025-115624
Malicious code in castor-cypress-figures-betelgeuse npm...
EUVD-2025-124506
Malicious code in nextjs-figures-hermes-spinner npm...
EUVD-2025-124303
Malicious code in non-blocking-phoenix-figures-algol npm...
EUVD-2025-116000
Malicious code in bootstrap-event-figures-eslint-config npm...
EUVD-2025-113628
Malicious code in figures-spica-halley-enceladus npm...
EUVD-2025-115983
Malicious code in bootstrap-rollup-figures-auriga npm...
EUVD-2025-122314
Malicious code in sagitta-perseus-figures-loop npm...
Malicious code in husky-figures-bellatrix-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7290a8ee768fe8eb682d1a4b184d110bd129efb75b6be7c89154ad79ad18e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120364
Malicious code in wolf-xo-meteor-figures npm...
EUVD-2025-122188
Malicious code in scripts-grunt-figures-sirius npm...
Malicious code in commitizen-rimraf-figures-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aae2714021dd118c8ba366f6b6870e5c1419b5ba2ac2523986e777b5c22445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...