260 matches found
EUVD-2025-123939
Malicious code in passport-io-gatsby-nconf npm...
EUVD-2025-111392
Malicious code in markdownlint-lacerta-solis-nconf npm...
EUVD-2025-113637
Malicious code in figures-nconf-celeste-triton npm...
EUVD-2025-124619
Malicious code in nconf-airbnb-draco-magellan npm...
Malicious code in nconf-thuban-centaurus-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113146
Malicious code in google-mensa-meteor-nconf npm...
MAL-2025-145320 Malicious code in nconf-janus-commitizen-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5c0a3964cbb5df915e60a77fb981005314339b39767d8b59181c63a6791732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145533 Malicious code in node-sass-csv-nconf-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140533 Malicious code in centauri-nconf-leda-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd1c3839c4c52ac299aa6ff8a234c2c2d6ebd9a1e9f5d26360e271986f7d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123156
Malicious code in public-postcss-loader-nconf-fusion npm...
EUVD-2025-124230
Malicious code in npm-standard-sagitta-nconf npm...
EUVD-2025-124606
Malicious code in nconf-enif-tethys-europa npm...
EUVD-2025-121304
Malicious code in tethys-mongodb-orbit-nconf npm...
EUVD-2025-124589
Malicious code in nconf-tool-magellan-perseus npm...
EUVD-2025-120652
Malicious code in warp-xanadu-nconf-vuetify npm...
EUVD-2025-114030
Malicious code in envconfig-nconf-magellan-gemini npm...
EUVD-2025-113358
Malicious code in gacrux-capella-nconf-quito npm...
Malicious code in ophiuchus-nconf-init-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2cf8d25782cf0be02795f39624b8174d2128655c12d53b293cb8fef2012c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...