271 matches found
EUVD-2025-113656
Malicious code in fetch-pyxis-inquirer-dynamo npm...
EUVD-2025-116015
Malicious code in bootes-ophiuchus-phoenix-pyxis npm...
EUVD-2025-113720
Malicious code in express-pyxis-sails-stop npm...
EUVD-2025-124357
Malicious code in nodejs-framework-taurus-pyxis npm...
EUVD-2025-123045
Malicious code in pyxis-halley-hugo-unuk npm...
EUVD-2025-123035
Malicious code in pyxis-proxima-library-farout npm...
EUVD-2025-113451
Malicious code in fornax-webpack-pyxis-webdriverio npm...
EUVD-2025-114328
Malicious code in dotenv-safe-upgrade-neptune-pyxis npm...
Malicious code in pyxis-leda-iota-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c470968dc0f4f1b5769ff5b48425093b4c2b56337f679c2a11b9757d72f10f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116454
Malicious code in atlas-mdx-pyxis-process npm...
EUVD-2025-111984
Malicious code in kastra-pyxis-materialize-socketio npm...
Malicious code in farout-karma-sqlite-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16c0ccc134f3847d2a92330a4457c4e5179f87c348f5481d1e1a54bc674c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120043
Malicious code in zephyr-lynx-stop-pyxis npm...
EUVD-2025-123029
Malicious code in pyxis-webdriver-manager-colors-cluster npm...
EUVD-2025-123043
Malicious code in pyxis-juno-uninstall-gatsby npm...
EUVD-2025-112351
Malicious code in izar-pyxis-wasat-eris npm...
EUVD-2025-121334
Malicious code in testcafe-fusion-apex-pyxis npm...
EUVD-2025-115036
Malicious code in convict-fork-pyxis-library npm...
Malicious code in convict-fork-pyxis-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...