137750 matches found
EUVD-2025-179874
Malicious code in carpo-mdx-comet-hyperion npm...
Malicious code in awk-node-public-interpret-cron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e72184d33130eb0661746bef8ae65da6a9d81b8319bca387ad8374ec909da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177254
Malicious code in perseus-metalsmith-acamar-iota npm...
EUVD-2025-177343
Malicious code in paleontology-tailwindcss-tethys-jekyll npm...
EUVD-2025-175632
Malicious code in water-user-fast-sanitize-test npm...
Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-darkmatter-lint-staged-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac68762e33089807478b221c74a906d070cef10fe0699ea1243ff9090ef6d249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178779
Malicious code in ganymede-mesosphere-nconf-local npm...
Malicious code in heka-antares-vulcan-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c307536c58204cd3b17873413e4c2936eb8555c5cc85cafc399332a5578418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178002
Malicious code in luna-sequelize-markdown-pdf-meissa npm...
EUVD-2025-179061
Malicious code in eris-umbra-dotenv-scorpius npm...
EUVD-2025-180403
Malicious code in apex-antares-polaris-cosmology npm...
EUVD-2025-176089
Malicious code in sync-taurus-cluster-webpack npm...
EUVD-2025-178673
Malicious code in graviton-command-global-axios npm...
EUVD-2025-178585
Malicious code in hawkingradiation-sadr-buffer-heliophysics npm...
EUVD-2025-178604
Malicious code in hapi-protoplanetarydisk-halley-aether npm...
EUVD-2025-180011
Malicious code in book-data-short-index-object npm...
Malicious code in umbra-farout-barnard-redshift (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...