227 matches found
MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124541
Malicious code in neptune-shelljs-mysql-local npm...
MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114310
Malicious code in draco-wasat-neptune-shelljs npm...
EUVD-2025-111745
Malicious code in levels-yaml-build-shelljs npm...
EUVD-2025-122003
Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint npm...
EUVD-2025-122206
Malicious code in scorpius-shelljs-jekyll-meissa npm...
EUVD-2025-122009
Malicious code in shelljs-heka-sass-loader-gemini npm...
EUVD-2025-115982
Malicious code in bootstrap-shelljs-enif-cassini npm...
EUVD-2025-124435
Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...
EUVD-2025-120054
Malicious code in zephyr-airbnb-procyon-shelljs npm...
EUVD-2025-123352
Malicious code in process-shelljs-neptune-taurus npm...
EUVD-2025-115789
Malicious code in callback-shelljs-antares-pavo npm...
EUVD-2025-122005
Malicious code in shelljs-library-development-commitlint npm...
EUVD-2025-122010
Malicious code in shelljs-farout-indus-version npm...
Malicious code in shelljs-ursa-fornax-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121999
Malicious code in shelljs-nova-xenon-got npm...