137476 matches found
Malicious code in water-catch-cloud-upsilon-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178077
Malicious code in lint-isostasy-altair-less-loader npm...
EUVD-2025-178903
Malicious code in final-dog-throw-resolve-short npm...
EUVD-2025-176469
Malicious code in sed-sigma-encrypt-catch-warn npm...
EUVD-2025-180264
Malicious code in async-lynx-lithosphere-telesto npm...
EUVD-2025-177460
Malicious code in omicron-short-water-easy-beta npm...
Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179332
Malicious code in deneb-parallax-aldebaran-prettier npm...
EUVD-2025-177766
Malicious code in mongoose-supernova-transhumanism-gulp npm...
EUVD-2025-176410
Malicious code in server-publish-ultra-ultra npm...
EUVD-2025-176277
Malicious code in spawn-regulus-brane-nodemon npm...
EUVD-2025-179548
Malicious code in cosmicray-draco-interferometry-heka npm...
EUVD-2025-180155
Malicious code in backend-exec-husky-public npm...
EUVD-2025-176235
Malicious code in stack-compress-nu-zeta-mock npm...
EUVD-2025-178538
Malicious code in hermes-dactyl-canopus-flare npm...
EUVD-2025-180436
Malicious code in analyze-key-simple-long-gamma npm...
EUVD-2025-175781
Malicious code in upsilon-parse-module-virtualize-sandbox npm...
EUVD-2025-178815
Malicious code in fusion-postcss-loader-supercluster-biohacking npm...
Malicious code in eclipse-eridanus-upgrade-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...