588 matches found
Malicious code in posthog-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ec4a50c0b553e9abbcc25147ad50014cf1488415e1ec8e3234f3e9bb3cc24e The package posthog-node was found to contain malicious code. Source: google-open-source-security...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-197828
Malicious code in node-calculator-c3ef npm...
MAL-2025-190525 Malicious code in node-calculator-043e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532269700ab053c5c151399cce76e50bda6a1ac575b1aa7187609eaaa4a87ab9 The package node-calculator-043e was found to contain malicious code...
EUVD-2025-177569
Malicious code in node-optimize-table-alpha-final npm...
EUVD-2025-177956
Malicious code in markdown-less-loader-joviology-fetch npm...
EUVD-2025-175976
Malicious code in testcafe-pegasus-neptune-remark npm...
EUVD-2025-175953
Malicious code in thread-simulate-meta-small-cat npm...
EUVD-2025-179273
Malicious code in dorado-norma-sequelize-hydrogeology npm...
EUVD-2025-175889
Malicious code in transport-registry-slidev-upgrade npm...
EUVD-2025-175509
Malicious code in xenobiology-technocracy-dotenv-safe-brane npm...
Malicious code in aquarius-slidev-equinox-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b4b93c5880a11a602e472cc9f2c1f1a2fb41779b5d28d02295ae6d2c12554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176652
Malicious code in reveal-md-cladistics-brane-blazar npm...
MAL-2025-186399 Malicious code in cryovolcano-grus-ini-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a229347ff016f9d70393ed03e8a4a921a6e4c86a3a5603209a0d4bd75855e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178888
Malicious code in flare-backend-jsonp-orogeny npm...
EUVD-2025-175652
Malicious code in warp-luminescence-ionosphere-baryon npm...
EUVD-2025-175926
Malicious code in toml-protractor-spinner-inflation npm...
EUVD-2025-178485
Malicious code in hydra-duplex-npm-ophiuchus npm...