448 matches found
EUVD-2025-123725
Malicious code in phoenix-gulp-process-kaus npm...
EUVD-2025-112993
Malicious code in gulp-nightmare-postcss-cordelia npm...
MAL-2025-148132 Malicious code in spectron-webdriver-gulp-quasar-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139413 Malicious code in antares-gulp-apex-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112996
Malicious code in gulp-iota-sass-loader-cygnus npm...
EUVD-2025-115600
Malicious code in celeste-gulp-quito-cluster npm...
EUVD-2025-112994
Malicious code in gulp-mensa-izar-changelog npm...
Malicious code in adonis-gulp-ini-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124452
Malicious code in nightwatch-gulp-rest-private npm...
Malicious code in celeste-gulp-quito-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95a706d8fcb139fc6c13e9cb35d3a15d976bd763cd46ba60ce9024625e4a61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112991
Malicious code in gulp-package-remark-non-blocking npm...
Malicious code in command-gulp-stream-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-cluster-chalk-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124204
Malicious code in nuxtjs-typeorm-odin-gulp npm...
EUVD-2025-115626
Malicious code in castor-andromeda-spawn-gulp npm...
Malicious code in gulp-avior-dependencies-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...