4732 matches found
MAL-2025-148720 Malicious code in toml-nodejs-spinner-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b665158c37110255c5be34bbe5ad2da8289d225777f4daeed830c7f915a5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147950 Malicious code in sirius-fork-nodejs-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121885
Malicious code in soap-winston-antares-nodejs npm...
EUVD-2025-122989
Malicious code in quark-pipe-mocha-nodejs npm...
EUVD-2025-121090
Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...
EUVD-2025-124035
Malicious code in ora-jekyll-nodejs-antd npm...
EUVD-2025-115145
Malicious code in commitlint-config-angular-ganymede-nodejs-mysql npm...
Malicious code in zenobia-nodejs-sass-loader-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4612b348f54e7b925fedd6e8bf99644e18a6cda4dc4e08b72f5925baae34e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116050
Malicious code in blitz-nodejs-postcss-umbra npm...
EUVD-2025-113468
Malicious code in fornax-polaris-nodejs-ignite npm...
EUVD-2025-121962
Malicious code in sirius-nodejs-pino-chalk npm...
Malicious code in sirius-fork-nodejs-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111140
Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...
EUVD-2025-124359
Malicious code in nodejs-elektra-perseus-apollo npm...
EUVD-2025-112368
Malicious code in iota-umbra-upgrade-nodejs npm...
EUVD-2025-124355
Malicious code in nodejs-grus-gacrux-auriga npm...