442 matches found
EUVD-2025-112732
Malicious code in hugo-cassini-gulp-flare npm...
EUVD-2025-124838
Malicious code in mocha-gulp-cordelia-buffer npm...
EUVD-2025-112991
Malicious code in gulp-package-remark-non-blocking npm...
Malicious code in gulp-command-luna-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8040998f40a0ab4389d7ecae619200c50d3cfc532206a62d56ab42529709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113523
Malicious code in fork-gulp-bellatrix-semantic-release npm...
EUVD-2025-116189
Malicious code in barnard-nebula-altair-gulp npm...
EUVD-2025-114614
Malicious code in deimos-gulp-convict-rimraf npm...
EUVD-2025-114206
Malicious code in electron-builder-gulp-tailwindcss-nova npm...
EUVD-2025-124452
Malicious code in nightwatch-gulp-rest-private npm...
EUVD-2025-122910
Malicious code in radiant-comet-module-gulp npm...
EUVD-2025-121117
Malicious code in triton-convict-yakutsk-gulp npm...
EUVD-2025-113270
Malicious code in gatsby-exec-foundation-gulp npm...
EUVD-2025-122712
Malicious code in relay-sedna-gulp-altair npm...
EUVD-2025-112997
Malicious code in gulp-command-luna-zephyr npm...
EUVD-2025-112996
Malicious code in gulp-iota-sass-loader-cygnus npm...
EUVD-2025-113002
Malicious code in gulp-await-antares-apex npm...
Malicious code in adonis-gulp-ini-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120366
Malicious code in wolf-tailwindcss-gulp-docusaurus npm...
Malicious code in hugo-cassini-gulp-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...