187 matches found
EUVD-2025-112900
Malicious code in heka-perseus-jasmine-yonder npm...
Malicious code in development-heka-fetch-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123888
Malicious code in pegasus-heka-eris-magellan npm...
EUVD-2025-114638
Malicious code in dagda-heka-phoebe-quantum npm...
Malicious code in nuxtjs-grus-heka-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114742
Malicious code in cygnus-heka-mensa-hermes npm...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-120559
Malicious code in webdriverio-heka-weywot-fomalhaut npm...
Malicious code in meteor-hyperion-fetch-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112909
Malicious code in heka-europa-europa-gulp npm...
EUVD-2025-121769
Malicious code in spica-cli-heka-cressida npm...
EUVD-2025-111308
Malicious code in meissa-heka-wolf-fornax npm...
EUVD-2025-112661
Malicious code in hydra-postcss-heka-rigel npm...
EUVD-2025-112202
Malicious code in jekyll-norma-markdown-pdf-heka npm...
Malicious code in altair-promise-castor-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112894
Malicious code in heka-scorpius-module-registry npm...
EUVD-2025-123768
Malicious code in phoebe-heka-procyon-nova npm...
EUVD-2025-112742
Malicious code in html-webpack-plugin-rigel-heka-gemini npm...