143424 matches found
EUVD-2025-176898
Malicious code in pulsar-selenium-oortcloud-dorado npm...
Malicious code in impulse-node-sass-private-vuetify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b4e69a7b42d75448eca0a1127eaef99dea1d90d48f5d139d8a3ce16a5bbb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176909
Malicious code in pulsar-apollo-decoherence-public npm...
EUVD-2025-175411
Malicious code in zephyr-leda-procyon-pegasus npm...
EUVD-2025-179093
Malicious code in epsilon-catch-cold-beta-new npm...
EUVD-2025-177622
Malicious code in new-transpile-alpha-log-proxy npm...
EUVD-2025-176597
Malicious code in root-cluster-bad-final-rho npm...
Malicious code in route-compile-good-private-tree (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4656944013166c647172585699e90a5fa13386025f1b2465f79a8fe3483315bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178813
Malicious code in fusion-publish-query-auth0 npm...
EUVD-2025-178061
Malicious code in lithosphere-changelog-grunt-uglify-js npm...
EUVD-2025-177507
Malicious code in nuxtjs-quasarjet-cross-env-taurus npm...
EUVD-2025-180176
Malicious code in awk-mock-rain-enum-pi npm...
EUVD-2025-176223
Malicious code in standard-thuban-commitlint-config-angular-got npm...
EUVD-2025-176595
Malicious code in root-rain-catch-sigma-float npm...
EUVD-2025-175518
Malicious code in xanthus-redis-scripts-fomalhaut npm...
Malicious code in umbra-iota-graphql-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0bdf76910544de6f7f52a3893e80a33923959859d77b7bb710fdc4a41378e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176556
Malicious code in sagitta-publish-wasat-fornax npm...