37380 matches found
EUVD-2025-124219
Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...
EUVD-2025-120916
Malicious code in upgrade-geckodriver-semantic-release-superagent npm...
EUVD-2025-113766
Malicious code in exec-indus-quark-semantic-release npm...
EUVD-2025-122087
Malicious code in semantic-release-sails-webdriver-mocha-npm npm...
EUVD-2025-122131
Malicious code in sedna-semantic-release-gridsome-janus npm...
EUVD-2025-122946
Malicious code in query-release-it-pulsar-nextjs npm...
EUVD-2025-122698
Malicious code in release-it-hyperion-gacrux-slidev npm...
EUVD-2025-123726
Malicious code in phoenix-fornax-dagda-release-it npm...
EUVD-2025-122687
Malicious code in release-it-sass-loader-parcel-fork npm...
EUVD-2025-112683
Malicious code in husky-semantic-release-zenith-iota npm...
Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122001
Malicious code in shelljs-nestjs-orbit-release-it npm...
EUVD-2025-121427
Malicious code in telesto-release-it-google-javascript npm...
EUVD-2025-122700
Malicious code in release-it-eslint-nodejs-titan npm...
Malicious code in axios-ignite-ignite-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3846ea46f2f5c44a4d3ceac40b2d0b67af170eecb203d8a9315e8eb12cf17aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114972
Malicious code in cors-semantic-release-sagitta-registry npm...
EUVD-2025-122689
Malicious code in release-it-quark-antd-meteor npm...
EUVD-2025-121688
Malicious code in sqlite-release-it-markdown-pdf-comet npm...
Malicious code in taurus-release-it-sadr-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...