724 matches found
EUVD-2025-115437
Malicious code in changelog-hydra-hugo-ini npm...
EUVD-2025-112019
Malicious code in karma-atlas-bulma-ini npm...
EUVD-2025-123818
Malicious code in perseus-playwright-ini-non-blocking npm...
EUVD-2025-112072
Malicious code in juno-sync-middleware-ini npm...
EUVD-2025-111306
Malicious code in meissa-ini-xo-fomalhaut npm...
EUVD-2025-111426
Malicious code in markdown-pdf-dactyl-ini-fetch npm...
EUVD-2025-114903
Malicious code in cosmos-eslint-transform-ini npm...
EUVD-2025-112509
Malicious code in ini-release-it-pyxis-auriga npm...
EUVD-2025-111351
Malicious code in mdx-cressida-ini-async npm...
Malicious code in canopus-ini-carpo-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114487
Malicious code in development-ini-start-epimetheus npm...
EUVD-2025-113600
Malicious code in firebase-rigel-fornax-ini npm...
EUVD-2025-112507
Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...
EUVD-2025-112921
Malicious code in hapi-miranda-changelog-ini npm...
EUVD-2025-112524
Malicious code in ini-event-carpo-meteor npm...
Malicious code in adonis-gulp-ini-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120166
Malicious code in yakutsk-dactyl-ini-astro npm...
EUVD-2025-112514
Malicious code in ini-pulsar-cross-env-quantum npm...
Malicious code in ini-middleware-build-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...