137480 matches found
EUVD-2025-178044
Malicious code in local-jasmine-gammarayburst-delphinus npm...
EUVD-2025-180140
Malicious code in balance-char-byte-final-big npm...
EUVD-2025-176144
Malicious code in sun-bad-assert-secure-protected npm...
Malicious code in aldebaran-regulus-bellatrix-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177705
Malicious code in native-docusaurus-xerxes-unuk npm...
EUVD-2025-178813
Malicious code in fusion-publish-query-auth0 npm...
EUVD-2025-177551
Malicious code in nodemon-css-loader-husky-parcel npm...
Malicious code in lyra-archaeoastronomy-graviton-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8899ed7471e985e84376208e83bc674a3f185c1387225341796fa134880c727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178408
Malicious code in init-charon-terser-upgrade npm...
EUVD-2025-177063
Malicious code in prettier-stylelint-soap-acamar-build npm...
EUVD-2025-179805
Malicious code in chai-got-pino-commitizen npm...
EUVD-2025-176233
Malicious code in standard-altair-izar-sync npm...
Malicious code in umbriel-leda-pipe-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbced70f13ff299b1492268d064d3da9078e4feed78b8d6225d5a2cb765ff9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-spectron-webdriver-less-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vulcan-asthenosphere-babel-exoplanet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0dda41e2e382a5cfbb82103d57a5d91dc0d320161ecb63ec8d14e8e0f27cd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-phoebe-jabbah-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parallax-chakra-ui-cybernetics-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc8a5105d982a9f1cce71004505af3c846f385a2b34a35bd91283b0aaf5c9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in changelog-hugo-fusion-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56370b589ac24acf0fc8bca861dd240bb702293f6a90a1ef700afbc9e61584ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...