224 matches found
Malicious Package
Overview dagda-gulp-quito-grunt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
EUVD-2025-178303
Malicious code in janus-radiant-avior-quito npm...
EUVD-2025-176739
Malicious code in regulus-protoplanetarydisk-quito-kastra npm...
Malicious code in loop-quito-hyperion-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1026aa50dc1e0844d749d156395863d5338ea4214c14c836f4ac9d9e3515500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176823
Malicious code in quito-rocket-radiant-middleware npm...
EUVD-2025-180032
Malicious code in blazar-quark-publish-quito npm...
EUVD-2025-179964
Malicious code in browserify-seismology-vega-quito npm...
EUVD-2025-178796
Malicious code in galaxy-bellatrix-quito-kastra npm...
EUVD-2025-178016
Malicious code in loop-quito-hyperion-centauri npm...
EUVD-2025-176586
Malicious code in run-script-australis-quito-repository npm...
EUVD-2025-180400
Malicious code in apex-charon-lyra-quito npm...
EUVD-2025-176036
Malicious code in technosignature-quark-quito-slides npm...
Malicious code in quito-rocket-radiant-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1027d85e5f5fe77252e470808dec33a66a0131fb5706d9c2bdc7aef3e9a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quito-cryovolcano-nightwatch-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a24e9acd11ed85f87985112d1bd7cc1e77631e7593134f4b3a95d72977e303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176872
Malicious code in quantum-node-config-quito-cosmos npm...
EUVD-2025-176240
Malicious code in sqlite-oauth-quito-graphql npm...
Malicious code in quasar-promise-kaus-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178933
Malicious code in fermion-geochronology-quito-janus npm...