415 matches found
EUVD-2025-112014
Malicious code in karma-delphinus-materialize-dotenv-safe npm...
EUVD-2025-115942
Malicious code in buffer-mutation-changelog-karma npm...
EUVD-2025-111353
Malicious code in mdx-comet-vortex-karma npm...
EUVD-2025-115881
Malicious code in bulma-package-karma-pegasus npm...
EUVD-2025-116425
Malicious code in auriga-figures-karma-ursa npm...
EUVD-2025-112016
Malicious code in karma-cordelia-private-izar npm...
EUVD-2025-121729
Malicious code in spinner-fornax-hermes-karma npm...
EUVD-2025-115174
Malicious code in commitizen-karma-markdown-child-process npm...
EUVD-2025-124665
Malicious code in mysql-lynx-bellatrix-karma npm...
Malicious code in mdx-comet-vortex-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111472
Malicious code in magellan-karma-barnard-lint npm...
Malicious code in karma-taurus-browserify-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232bd8b8068a1ff13d4b4659cb36d3a3e4198a36dfc4c886d84bdf7445daa6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122920
Malicious code in quito-request-karma-html-webpack-plugin npm...
EUVD-2025-116277
Malicious code in axios-despina-karma-duplex npm...
EUVD-2025-116894
Malicious code in adonis-astro-phoenix-karma npm...
EUVD-2025-112018
Malicious code in karma-build-sass-loader-kastra npm...
EUVD-2025-114548
Malicious code in deneb-ursa-karma-javascript npm...
EUVD-2025-112006
Malicious code in karma-galaxy-proxima-bunyan npm...
Malicious code in quito-request-karma-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...