137738 matches found
EUVD-2025-175886
Malicious code in transport-ursa-spinner-pulsar npm...
Malicious code in sagitta-frontend-eslint-config-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2500c73f9e15b142f13f572a687f151b1f6a8e3eb54fb96cbd58ce242f02f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hugo-capella-janus-nucleosynthesis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c833040778b208833172be98968dc0d98c708a39a399c3fdd27d8c86303fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177499
Malicious code in object-authorize-array-cluster-encrypt npm...
EUVD-2025-176409
Malicious code in server-redis-umbra-fornax npm...
Malicious code in redis-corvus-transform-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53578cb8707c6a8f4d8cf11e99a8d46d4bb1ee0c918484fb2167d78b26b8b3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178521
Malicious code in higgs-markdown-pdf-kaus-helmet npm...
EUVD-2025-178075
Malicious code in lint-less-loader-jekyll-virgo npm...
Malicious code in express-cors-dysonswarm-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d813d65a50244ad3649baaef287695f9e5c9fcf145c42566664a40f4d368e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mutation-promise-xenon-fermion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554d723842b52f3bee2363cd06fd5b08d3a99aa9b45c5ec018bee13a5dca8525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179519
Malicious code in cosmos-void-procyon-nanotechnology npm...
EUVD-2025-179284
Malicious code in docusaurus-thermosphere-aquarius-rehype npm...
EUVD-2025-179292
Malicious code in docusaurus-bellatrix-xanthus-virgo npm...
EUVD-2025-180315
Malicious code in ashjustmeteai npm...
Malicious code in carina-solis-ultra-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd53fa33a8f12455a525df8cb7c7ad2cdcc564bbfe5f34a826d792195879d9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179114
Malicious code in enum-proxy-sun-omicron-nu npm...
EUVD-2025-177179
Malicious code in pi-permission-debug-decrypt-slow npm...
EUVD-2025-176271
Malicious code in spectron-commitizen-server-jwt npm...
Malicious code in xenon-sirius-scripts-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59bb199e537098aabd62f83528d0fe807818af58acb052a12b5198cddd98f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...