240 matches found
Malicious Package
Overview lint-cassini-metalsmith-jupiter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview eclipse-aether-metalsmith-nconf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview hercules-build-metalsmith-graviton is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
EUVD-2025-176887
Malicious code in pyxis-blueshift-metalsmith-enceladus npm...
EUVD-2025-177875
Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry npm...
MAL-2025-185794 Malicious code in betelgeuse-metalsmith-frontend-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790dcd2ceb700af788d0557c09c4d92c94916ec90b672e724cb3fcd64cdc8338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180088
Malicious code in betelgeuse-metalsmith-frontend-tethys npm...
MAL-2025-188010 Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c249cc1d9495c472c96febcbb4aa5275a3ddc5edcbc067eb482c1e37aa6b7cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175599
Malicious code in webdriverio-europa-perseus-metalsmith npm...
EUVD-2025-177874
Malicious code in metalsmith-json-husky-dotenv-safe npm...
EUVD-2025-179265
Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith npm...
Malicious code in metalsmith-json-husky-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b97c7a91f7c4306ed3e704e7d987f5ad1bfcf878a6b3f756ab08441f24198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179342
Malicious code in dendrochronology-metalsmith-rollup-plutology npm...
EUVD-2025-175458
Malicious code in yakutsk-metalsmith-astrochemistry-terser npm...
EUVD-2025-177096
Malicious code in postcss-loader-ganymede-metalsmith-farout npm...
EUVD-2025-177872
Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...
EUVD-2025-179434
Malicious code in cypress-geckodriver-vulcan-metalsmith npm...
EUVD-2025-178778
Malicious code in ganymede-metabolomics-cryptography-metalsmith npm...