11976 matches found
EUVD-2025-122007
Malicious code in shelljs-install-shelljs-proxima npm...
EUVD-2025-122465
Malicious code in rimraf-pegasus-blaze-install npm...
EUVD-2025-122216
Malicious code in scorpius-config-ursa-install npm...
EUVD-2025-123903
Malicious code in pegasus-backend-event-install npm...
EUVD-2025-123757
Malicious code in phoebe-morgan-install-concurrently npm...
EUVD-2025-123451
Malicious code in prettier-nightwatch-request-install npm...
EUVD-2025-123402
Malicious code in prettier-stylelint-sync-install-loopback npm...
EUVD-2025-123018
Malicious code in quantum-install-puppeteer-link npm...
EUVD-2025-124688
Malicious code in mutation-rehype-semantic-ui-install npm...
EUVD-2025-124409
Malicious code in node-config-juno-install-iota npm...
EUVD-2025-116538
Malicious code in arcturus-ariel-install-eleventy npm...
Malicious code in dependencies-install-xenon-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in izar-kronos-install-epimetheus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea54134ffabf460a9db7eea0d45b80e997abc846234f08add6f687bcccf6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112422
Malicious code in install-writable-centaurus-wolf npm...
EUVD-2025-112446
Malicious code in install-aquarius-jasmine-thuban npm...
EUVD-2025-121533
Malicious code in supervisor-install-postgres-node-sass npm...
EUVD-2025-121131
Malicious code in transport-postgres-slidev-install npm...
EUVD-2025-115555
Malicious code in centaurus-rimraf-install-rollup-plugin npm...
MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...