759 matches found
MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jira-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...
EUVD-2025-37067
Malicious code in jira-lint npm...
MAL-2025-49226 Malicious code in jira-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...
Malicious Package
Overview redux-lint-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2021-15614
Malware in sbrugna...
EUVD-2021-1073
Malware in sbrugna...
EUVD-2025-15407
Malicious code in bioql PyPI...
EUVD-2022-1944
Malicious code in bioql PyPI...
EUVD-2022-5620
Malicious code in bioql PyPI...
EUVD-2022-2243
Malicious code in bioql PyPI...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
MAL-2025-45800 Malicious code in remark-pulsar-vortex-lint-staged (npm)
The package remark-pulsar-vortex-lint-staged was found to contain malicious code...
Malicious code in scripts-lint-staged-cygnus-mongoose (npm)
The package scripts-lint-staged-cygnus-mongoose was found to contain malicious code...
Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm)
The package antimatter-commitlint-config-angular-archaeoastronomy-lint was found to contain malicious code...
Malicious code in kastra-entanglement-lint-staged-wormhole (npm)
The package kastra-entanglement-lint-staged-wormhole was found to contain malicious code...
Malicious code in husky-xenos-lint-staged-dotenv (npm)
The package husky-xenos-lint-staged-dotenv was found to contain malicious code...