137482 matches found
EUVD-2025-177844
Malicious code in middleware-css-loader-eigenstate-pavo npm...
EUVD-2025-177479
Malicious code in odin-toml-element-ui-flare npm...
EUVD-2025-175564
Malicious code in wezen-hexo-update-lithosphere npm...
Malicious code in husky-helios-wezen-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17649c319fbcd9560753b90dabe7181f60522771c2b424dd6054ff810384f2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179696
Malicious code in cluster-sirius-promise-neutrino npm...
EUVD-2025-180068
Malicious code in biohacking-hexo-nebula-non-blocking npm...
EUVD-2025-176519
Malicious code in sass-loader-lepton-nebula-virgo npm...
EUVD-2025-179704
Malicious code in cluster-concurrently-wolf-astrometry npm...
EUVD-2025-176446
Malicious code in selenium-cluster-framework-eleventy npm...
EUVD-2025-179843
Malicious code in catch-float-cluster-assert-load npm...
EUVD-2025-178305
Malicious code in janus-petrology-sedimentology-polaris npm...
Malicious code in eslint-plugin-husky-pavo-virgo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e746ee6f0fa370fc7f0fb5e7e4e47d2df2a52bc77ffee749e24d95a1f10b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176378
Malicious code in signal-throw-pi-sun-sigma npm...
EUVD-2025-177985
Malicious code in magellan-augmentedreality-webdriver-mocha-blitz npm...
EUVD-2025-180027
Malicious code in blaze-transport-genomics-telesto npm...
EUVD-2025-180030
Malicious code in blaze-farout-module-transport npm...
Malicious code in panspermia-zenobia-cryonics-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d62b4d8f6f507350616a579cdbce18a90c525a7b7c57f5777d99ae7a748c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in serialize-final-beta-deserialize-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bba06b449243111553ecbf6df8c3d97715228b596350a22e37f1b8ef6deff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...