761 matches found
Malicious code in canopus-ini-carpo-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112651
Malicious code in hydra-wasat-venus-ini npm...
EUVD-2025-124018
Malicious code in orbit-command-geckodriver-ini npm...
EUVD-2025-123818
Malicious code in perseus-playwright-ini-non-blocking npm...
EUVD-2025-112512
Malicious code in ini-pyxis-arcturus-izar npm...
EUVD-2025-115816
Malicious code in cache-xo-ini-wolf npm...
EUVD-2025-113473
Malicious code in fornax-mongodb-ini-sass-loader npm...
EUVD-2025-121221
Malicious code in toml-cross-env-private-ini npm...
EUVD-2025-115239
Malicious code in comet-callback-eridanus-ini npm...
EUVD-2025-112502
Malicious code in ini-wasat-react-bootstrap-javascript npm...
Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112532
Malicious code in ini-apex-ursa-gemini npm...
Malicious code in ini-puppeteer-sirius-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122917
Malicious code in quito-subscription-neptune-ini npm...
EUVD-2025-113694
Malicious code in farout-ini-spectron-markdownlint npm...
EUVD-2025-116256
Malicious code in babel-barnard-celeste-ini npm...
EUVD-2025-112522
Malicious code in ini-forever-foundation-framework npm...
EUVD-2025-112520
Malicious code in ini-meissa-taurus-avior npm...
Malicious code in ini-rehype-norma-weywot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd213bdc423b2ab5c22eace93f80c095bf7484f442dac2efef9cdf02dbaf54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...