196 matches found
Malicious code in loglevel-xenos-norma-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb2344b956fa9c662f301c31ca881fe491b0221853b2e0871fcd45a7167bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123386
Malicious code in private-norma-firebase-pipe npm...
EUVD-2025-116120
Malicious code in betelgeuse-ganymede-norma-octans npm...
Malicious code in helios-algol-norma-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fd6e85b9e1976f017059caf3a99dfac7420a381fbf45cc11c46863a194d26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114500
Malicious code in despina-standard-sagitta-norma npm...
EUVD-2025-112961
Malicious code in halley-jupiter-norma-polaris npm...
EUVD-2025-124038
Malicious code in ora-europa-tool-norma npm...
EUVD-2025-122391
Malicious code in rollup-proxima-norma-less-loader npm...
EUVD-2025-120771
Malicious code in virgo-halley-norma-cors npm...
EUVD-2025-122446
Malicious code in rocket-phoebe-norma-mui npm...
EUVD-2025-113168
Malicious code in global-norma-toml-cypress npm...
Malicious code in cors-chakra-ui-norma-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124280
Malicious code in norma-fusion-corvus-postcss-loader npm...
EUVD-2025-115940
Malicious code in buffer-norma-fornax-sedna npm...
EUVD-2025-124277
Malicious code in norma-iota-superagent-ora npm...
EUVD-2025-121501
Malicious code in sync-norma-algol-jsonp npm...
EUVD-2025-120408
Malicious code in winston-procyon-norma-xerxes npm...
Malicious code in config-meissa-norma-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...