114 matches found
EUVD-2025-75835
Malicious code in relievedspoonbill-strongdev npm...
EUVD-2025-75678
Malicious code in selfishtern-strongdev npm...
EUVD-2025-76995
Malicious code in electronicboar-strongdev npm...
MAL-2025-99264 Malicious code in agreed_ferret-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76458
Malicious code in knowncoral-strongdev npm...
EUVD-2025-77300
Malicious code in compacthawk-strongdev npm...
EUVD-2025-75888
Malicious code in quietgibbon-strongdev npm...
EUVD-2025-74923
Malicious code in bizarreconstrictor-strongdev npm...
EUVD-2025-76064
Malicious code in paralleltarantula-strongdev npm...
EUVD-2025-76632
Malicious code in hurtkangaroo-strongdev npm...
EUVD-2025-77353
Malicious code in chemicalstarfish-strongdev npm...
EUVD-2025-76274
Malicious code in minorwhippet-strongdev npm...
EUVD-2025-77043
Malicious code in dryweasel-strongdev npm...
EUVD-2025-77322
Malicious code in clinicalvole-strongdev npm...
Malicious code in able_giraffe-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14ca669678daf2926d030d13337c7b33ce140e75effa1f40cb6eb0c972fc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76209
Malicious code in nearbyslug-strongdev npm...
EUVD-2025-75494
Malicious code in surprisedhummingbird-strongdev npm...
EUVD-2025-76235
Malicious code in musicalstoat-strongdev npm...
EUVD-2025-76169
Malicious code in nosywren-strongdev npm...
Malicious code in gorgeous_beaver-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...