2357 matches found
EUVD-2025-111554
Malicious code in loopback-readable-meissa-miranda npm...
EUVD-2025-115934
Malicious code in buffer-readable-geckodriver-miranda npm...
EUVD-2025-121428
Malicious code in telesto-readable-forever-winston npm...
EUVD-2025-113197
Malicious code in gemini-relay-readable-sadr npm...
Malicious code in terser-atlas-figures-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114238
Malicious code in elara-cypress-pyxis-readable npm...
EUVD-2025-116001
Malicious code in bootstrap-enceladus-readable-mongoose npm...
EUVD-2025-114606
Malicious code in deimos-readable-winston-yonder npm...
EUVD-2025-113542
Malicious code in forever-lint-carina-readable npm...
EUVD-2025-122832
Malicious code in readable-pulsar-umbra-pegasus npm...
EUVD-2025-111965
Malicious code in kaus-local-readable-csv npm...
EUVD-2025-122840
Malicious code in readable-heka-chakra-ui-lacerta npm...
Malicious code in meissa-chakra-ui-mensa-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c41dcb2039948b5b1d3b95f09151efa9edd50c427aa1fcc052a6de060068f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114678
Malicious code in cz-conventional-changelog-readable-version-cz-conventional-changelog npm...
EUVD-2025-112443
Malicious code in install-build-readable-gacrux npm...
EUVD-2025-123381
Malicious code in private-readable-quantum-triton npm...
Malicious code in readable-sqlite-lint-staged-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116069
Malicious code in blaze-terser-webpack-plugin-polaris-readable npm...