137476 matches found
EUVD-2025-178471
Malicious code in hyperion-hermes-version-orbit npm...
EUVD-2025-176540
Malicious code in sandbox-bash-authorize-hot-simulate npm...
EUVD-2025-177711
Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...
Malicious code in colors-request-xo-xerxes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1498b0185b55cab24bef95e606502bbbd2afbfe23c40d14a9b5f91cec7b05faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in blazar-draco-mesosphere-mineralogy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a01697c106728258ab384897041a77198e1d8de26e461f241a9937d74f833c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175813
Malicious code in unuk-cryonics-gravitationalwave-meteor npm...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
EUVD-2025-180118
Malicious code in bellatrix-bunyan-neptune-hydra npm...
EUVD-2025-179785
Malicious code in chalk-mira-procyon-schema npm...
Malicious code in neptune-barnard-mdx-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c0e0acd449d91091dc3badd8761736dd2387ceacb715698941f9b53f6e56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176820
Malicious code in radiant-express-sync-tachyon npm...
EUVD-2025-175988
Malicious code in test-sigma-reject-daemon-cold npm...
EUVD-2025-178217
Malicious code in kardashevscale-transport-tailwindcss-dynamo npm...
EUVD-2025-175947
Malicious code in throw-omega-catch-hot-sanitize npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-179846
Malicious code in catch-bash-string-long-catch npm...
Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c772d9ee172d9d8a4149b89bb7e9d6739711a4032f4fe5a817bbd35ea114c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180407
Malicious code in antimatter-celeste-meissa-cryptography npm...