448 matches found
Malicious code in upgrade-csv-gulp-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113532
Malicious code in fork-carpo-commitlint-gulp npm...
MAL-2025-142589 Malicious code in fork-gulp-bellatrix-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6373b65f6de2f3650a7c758c470a6c57c3364116da0f1ed56b7c095fbcdc50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123137
Malicious code in publish-gulp-nestjs-yonder npm...
EUVD-2025-120256
Malicious code in xenos-fetch-gulp-eslint-config npm...
EUVD-2025-112995
Malicious code in gulp-json-buffer-grus npm...
MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148620 Malicious code in tethys-gulp-bootstrap-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143111 Malicious code in gulp-blitz-radiant-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143119 Malicious code in gulp-nightmare-postcss-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139211 Malicious code in adonis-gulp-ini-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143121 Malicious code in gulp-package-remark-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28303a473c0b6823ee48af1ce091a49f265056bedbcccdad2bce60455ee7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122879
Malicious code in rate-limiter-lynx-shelljs-gulp npm...
EUVD-2025-112986
Malicious code in gulp-xanadu-terser-prompts npm...