5327 matches found
MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143633 Malicious code in init-titan-rollup-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8d6c574797e2e2e679ad497bd80547d1a272b15b1e582052f42f82f871c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in init-xenos-forever-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037cbe531b734ea1d67a651682ecfb3115ec8a3abe390a6a187266e51cbf4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122225
Malicious code in schema-init-less-loader-cosmos npm...
EUVD-2025-122174
Malicious code in scripts-sequelize-init-publish npm...
EUVD-2025-112484
Malicious code in init-postcss-markdown-pdf-sequelize npm...
EUVD-2025-112496
Malicious code in init-cosmos-corvus-pavo npm...
EUVD-2025-123408
Malicious code in prettier-stylelint-odin-hexo-init npm...
EUVD-2025-112481
Malicious code in init-subscription-callisto-europa npm...
EUVD-2025-113376
Malicious code in fusion-init-helios-hercules npm...
EUVD-2025-120384
Malicious code in wolf-dotenv-safe-init-process npm...
EUVD-2025-115026
Malicious code in convict-polaris-init-chai npm...
EUVD-2025-124370
Malicious code in node-sass-process-wolf-init npm...
Malicious code in forever-init-hermes-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122595
Malicious code in resolvers-init-ursa-docusaurus npm...
EUVD-2025-113543
Malicious code in forever-init-hermes-electron npm...
EUVD-2025-121897
Malicious code in soap-nextjs-init-tool npm...
EUVD-2025-121422
Malicious code in telesto-wezen-mira-init npm...