7463 matches found
EUVD-2025-177318
Malicious code in parse-kappa-void-proxy-scale npm...
EUVD-2025-180461
Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...
EUVD-2025-175957
Malicious code in thread-compile-parse-decrypt-air npm...
EUVD-2025-176504
Malicious code in scale-parse-await-book-private npm...
MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179265
Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith npm...
EUVD-2025-176694
Malicious code in report-good-error-user-parse npm...
EUVD-2025-177037
Malicious code in process-simulate-parse-integer-wind npm...
EUVD-2025-179266
Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse npm...
EUVD-2025-176445
Malicious code in selenium-dotenv-parse-variables-gacrux-vega npm...
EUVD-2025-180388
Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...
EUVD-2025-178183
Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...
EUVD-2025-178587
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...
EUVD-2025-179267
Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...
Malicious code in scale-parse-await-book-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf23bd6ac11aee950532e019d12d27aef2b746a2fcd39db0eafe766558432d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-176470
Malicious code in sed-shell-cat-encrypt-parse npm...
Malicious code in sun-serialize-parse-validate-alert (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...