229 matches found
Malicious code in soap-pavo-terser-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111962
Malicious code in kaus-mdx-miranda-pavo npm...
EUVD-2025-111499
Malicious code in lyra-scripts-pavo-impulse npm...
EUVD-2025-121490
Malicious code in tailwindcss-altair-pavo-jekyll npm...
EUVD-2025-115937
Malicious code in buffer-pavo-europa-gravity npm...
EUVD-2025-112876
Malicious code in helios-nightwatch-pavo-test npm...
EUVD-2025-123928
Malicious code in pavo-buffer-terser-webpack-plugin-nightmare npm...
Malicious code in pavo-altair-native-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in toml-lynx-pavo-sadr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7c4c02143b1da58f900d319a0d653ba3ebd915bedef7b645d75a51b6cf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123917
Malicious code in pavo-nightwatch-electron-query npm...
EUVD-2025-115475
Malicious code in chakra-ui-webdriver-mocha-pavo-child-process npm...
EUVD-2025-123916
Malicious code in pavo-pino-pretty-chariklo-repository npm...
EUVD-2025-123920
Malicious code in pavo-loopback-proxima-gatsby npm...
EUVD-2025-123931
Malicious code in pavo-antares-run-script-lyra npm...
EUVD-2025-115588
Malicious code in celeste-pavo-sagitta-development npm...
EUVD-2025-111921
Malicious code in koa-electron-reveal-md-pavo npm...
Malicious code in pavo-graphql-leda-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123923
Malicious code in pavo-graphql-leda-semantic-ui npm...