205 matches found
MAL-2025-148262 Malicious code in start-avior-node-config-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b94b90f7b87c9bcbf8fa48442a4412439280a7051468f929eb40ad950469d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120629
Malicious code in wasat-rollup-plugin-barnard-node-config npm...
EUVD-2025-124418
Malicious code in node-config-ariel-cosmiconfig-grus npm...
EUVD-2025-124417
Malicious code in node-config-commitlint-element-ui-avior npm...
EUVD-2025-124411
Malicious code in node-config-janus-version-sqlite npm...
EUVD-2025-124404
Malicious code in node-config-pulsar-google-weywot npm...
EUVD-2025-124401
Malicious code in node-config-terser-start-morgan npm...
EUVD-2025-114019
Malicious code in epimetheus-betelgeuse-toml-node-config npm...
EUVD-2025-111194
Malicious code in meteor-node-config-hugo-fomalhaut npm...
Malicious code in dependencies-hugo-phenomic-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ignite-callback-node-config-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-config-sadr-node-sass-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9531f78b9c6d8ced2fbe159fa6b011866cef7d09a1509b8ae0f2ffbf42f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nodemon-node-config-writable-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in process-spinner-node-config-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114009
Malicious code in epimetheus-nashira-node-config-forever npm...
EUVD-2025-114652
Malicious code in dactyl-typeorm-chromedriver-node-config npm...
EUVD-2025-114037
Malicious code in envconfig-eleventy-node-config-hyperion npm...
EUVD-2025-115463
Malicious code in chalk-jest-nestjs-node-config npm...