278 matches found
EUVD-2025-121040
Malicious code in ultra-bootes-async-morgan npm...
Malicious code in morgan-init-auth0-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1f7b65df5a3817d7d4aac2c24f406242e5012e4e015ce3e0b482c989f3fbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124746
Malicious code in morgan-dione-dactyl-achernar npm...
EUVD-2025-124734
Malicious code in morgan-nightwatch-webpack-blaze npm...
EUVD-2025-112623
Malicious code in hyperion-morgan-start-update npm...
Malicious code in rimraf-morgan-hugo-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a072eb34f9cbc9d7f1976d7bf811c57d791fdd1e5e63e36e842ed1b7936c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124736
Malicious code in morgan-middleware-readable-electron npm...
EUVD-2025-120363
Malicious code in wolf-yaml-morgan-cross-env npm...
EUVD-2025-123087
Malicious code in pulsar-jwt-warp-morgan npm...
Malicious code in test-umbriel-morgan-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7e38a95ac3fab8b1f25744bf8b720b6a5394219e6eba2b3e7a7456205abd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124747
Malicious code in morgan-commitlint-config-angular-repository-dynamo npm...
EUVD-2025-124732
Malicious code in morgan-regulus-xenon-gravity npm...
EUVD-2025-122980
Malicious code in quasar-ceres-morgan-uninstall npm...
EUVD-2025-116177
Malicious code in bellatrix-async-yildun-morgan npm...
EUVD-2025-113321
Malicious code in galaxy-materialize-morgan-meissa npm...
Malicious code in deneb-morgan-mongodb-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784163d0e2a8265aa80028b5501e309ce377ceee5e7e44bb1fdc98e8985cfeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115509
Malicious code in chai-morgan-aurora-commitlint npm...
EUVD-2025-114559
Malicious code in deneb-morgan-mongodb-publish npm...