541 matches found
EUVD-2025-114918
Malicious code in cosmiconfig-nextjs-tailwindcss-polaris npm...
EUVD-2025-115150
Malicious code in commitlint-config-angular-bulma-nextjs-aether npm...
EUVD-2025-116157
Malicious code in bellatrix-nextjs-jupiter-dagda npm...
EUVD-2025-124890
Malicious code in miranda-dactyl-nextjs-commitlint npm...
EUVD-2025-124511
Malicious code in nextjs-callisto-xanthus-auth0 npm...
EUVD-2025-112461
Malicious code in inquirer-nextjs-galaxy-hyperion npm...
Malicious code in colors-antd-nextjs-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0e3ba5b2f395bbf2c456bdb05e5d609a0a8725c37b957d003ec4933caf1df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123698
Malicious code in pino-meissa-izar-nextjs npm...
EUVD-2025-124496
Malicious code in nextjs-react-bootstrap-dependencies-nova npm...
MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145736 Malicious code in oauth-nextjs-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scorpius-chariklo-nextjs-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3accdb3220250ef79e197b795a03b196b4c924a07d04d83687cce7a3762d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123075
Malicious code in pulsar-xml-nextjs-eleventy npm...
EUVD-2025-112626
Malicious code in hyperion-markdown-process-nextjs npm...
MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149869 Malicious code in zenobia-nextjs-despina-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c39b2b8df8c767b81fc7ef59247aa5eb4ec4ed8f9332c752e245b3c566a99aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...