9686 matches found
EUVD-2025-177123
Malicious code in plutology-fusion-interstellarmedium-miranda npm...
Malicious code in helios-fusion-rollup-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180234
Malicious code in aurora-fusion-perseus-pm2 npm...
EUVD-2025-178813
Malicious code in fusion-publish-query-auth0 npm...
Malicious code in fusion-nextjs-iota-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2739ca69baf49a58e1a18599d116efe40fb26d5faa0c30a424d82a862f56e333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-semantic-ui-fusion-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584061c298f10964689f1ef6b99e08687def32aa09801e3a0bd33abfa06b5ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176778
Malicious code in readable-karma-xml-fusion npm...
EUVD-2025-179253
Malicious code in dotenv-semantic-ui-fusion-hexo npm...
EUVD-2025-179033
Malicious code in eslint-plugin-semantic-release-chalk-fusion npm...
EUVD-2025-177824
Malicious code in mira-fusion-yildun-css-loader npm...
EUVD-2025-178852
Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin npm...
EUVD-2025-177737
Malicious code in multiverse-carina-boson-fusion npm...
MAL-2025-187064 Malicious code in fusion-gravity-css-loader-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52baf9ca8ebdb49763df8f528108db23d21f441b6cd5d8a94e2be0ad3edd8db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xanthus-fusion-oauth-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mongodb-kastra-gridsome-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e827819cb34d09b58770afb4d907c8cfe540dad27e0303f9827fff00ee4bdb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178822
Malicious code in fusion-astrometry-speleology-sedimentology npm...
Malicious code in middleware-fusion-gemini-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab40641c6da304cc6922285105d49ffd9eb14410326e1a5f260efd9270fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...