143350 matches found
Malicious code in form-classifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...
Malicious code in bitsight (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899 The package bitsight was found to contain malicious code...
Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort. "The packages were systematically published over an extended period, flooding the npm...
Malicious code in @walletify/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47d10b25587929b2987efd39df23877c3753147c431eb456cef63e175e70588c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-175385
Malicious code in @walletify/ui npm...
EUVD-2025-175386
Malicious code in @walletify/core npm...
EUVD-2025-175384
Malicious code in @walletify/backend npm...
EUVD-2025-177660
Malicious code in neptune-lacerta-accretion-meteor npm...
EUVD-2025-175946
Malicious code in throw-simple-old-export-info npm...
EUVD-2025-179220
Malicious code in dysonswarm-loop-command-uranology npm...
EUVD-2025-179300
Malicious code in development-warp-geoarchaeology-odin npm...
EUVD-2025-179627
Malicious code in commitlint-publish-fornax-prettier-stylelint npm...
EUVD-2025-175866
Malicious code in try-data-signal-cloud-report npm...
EUVD-2025-179190
Malicious code in elara-dysonswarm-sirius-pyxis npm...
EUVD-2025-176415
Malicious code in server-carpo-carpo-cosmicray npm...
Malicious code in karma-remark-meissa-quasarjet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ba9b8f201e1838f0dfd5912cdccffa7d9283e7ef7d366a6fd932f1dc7a7ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178033
Malicious code in loglevel-exobiology-eslint-config-rate-limiter npm...
Malicious code in radiant-express-sync-tachyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lithosphere-pegasus-jest-paleoecology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fac9378ba65444786e230b66d8117785b3cbf66c7c6c667007647fd65d49e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...