138453 matches found
Malicious code in geoarchaeology-sagitta-chalk-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175770
Malicious code in ursa-eslint-config-draco-kronos npm...
EUVD-2025-175724
Malicious code in view-visualize-nu-shell-small npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-177268
Malicious code in permission-permission-link-monitor-web npm...
EUVD-2025-176989
Malicious code in protected-reject-decrypt-bad-big npm...
EUVD-2025-180078
Malicious code in big-star-kappa-alert-report npm...
EUVD-2025-177681
Malicious code in nebula-deneb-winston-apex npm...
EUVD-2025-177604
Malicious code in nightmare-start-meteor-node-sass npm...
EUVD-2025-178658
Malicious code in greatfilter-repository-on-proxima npm...
EUVD-2025-180071
Malicious code in biogeochemistry-wasat-polaris-meissa npm...
EUVD-2025-178201
Malicious code in key-encrypt-bad-class-kernel npm...
EUVD-2025-179552
Malicious code in cosmiconfig-gatsby-janus-slides npm...
Malicious code in command-prettier-stylelint-server-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6af256150fbf835417b18723113d89bd3ad42360b216fcf8333ad5760ffcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mui-asthenosphere-callback-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a2d722d630c36391a6462a8aa7ec39781063cf28bea9b925ad28d6e43bd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177077
Malicious code in prettier-meteor-mineralogy-vuepress npm...
Malicious code in hash-socket-slow-debug-interpret (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180159
Malicious code in babel-ophiuchus-mira-bellatrix npm...