264 matches found
MAL-2025-145379 Malicious code in neptune-shelljs-mysql-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d160095b072fe5c1f1c68de0e9a0cb000ff18e829d29172c19bac0398cc3cdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122002
Malicious code in shelljs-mongodb-eridanus-gemini npm...
EUVD-2025-120269
Malicious code in xenon-shelljs-chariklo-loglevel npm...
MAL-2025-141109 Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122012
Malicious code in shelljs-csv-antares-changelog npm...
EUVD-2025-112469
Malicious code in inquirer-cosmos-sqlite-shelljs npm...
EUVD-2025-116338
Malicious code in avior-cz-conventional-changelog-shelljs-zenobia npm...
EUVD-2025-124573
Malicious code in nebula-meissa-shelljs-local npm...
EUVD-2025-121998
Malicious code in shelljs-procyon-jsonp-nova npm...
EUVD-2025-122014
Malicious code in shelljs-bootes-regulus-sedna npm...
Malicious code in shelljs-csv-antares-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123208
Malicious code in proxima-figures-axios-shelljs npm...
Malicious code in scorpius-shelljs-jekyll-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111258
Malicious code in mensa-passport-module-shelljs npm...
EUVD-2025-112618
Malicious code in hyperion-pino-pretty-levels-shelljs npm...
EUVD-2025-122413
Malicious code in rollup-plugin-async-shelljs-procyon npm...
EUVD-2025-121997
Malicious code in shelljs-prompts-meteor-pavo npm...
EUVD-2025-113817
Malicious code in europa-start-shelljs-chromedriver npm...