4123 matches found
Malicious code in markdownlint-standard-run-script-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115453
Malicious code in chalk-run-script-prompts-css-loader npm...
EUVD-2025-122381
Malicious code in run-script-charon-rigel-koa npm...
MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112895
Malicious code in heka-run-script-norma-mongodb npm...
MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120322
Malicious code in xanadu-run-script-ceres-loopback npm...
EUVD-2025-116741
Malicious code in altair-pulsar-run-script-procyon npm...
Malicious code in thuban-run-script-callback-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in got-run-script-proxima-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
EUVD-2025-121596
Malicious code in stream-run-script-got-morgan npm...
EUVD-2025-111251
Malicious code in mensa-run-script-got-lyra npm...
EUVD-2025-115110
Malicious code in commitlint-zenobia-run-script-superagent npm...
EUVD-2025-123931
Malicious code in pavo-antares-run-script-lyra npm...
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
EUVD-2025-122383
Malicious code in run-script-bulma-jupiter-magellan npm...
EUVD-2025-124196
Malicious code in oauth-corvus-atlas-run-script npm...