1268 matches found
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
Malicious code in sequelize-transform-jsonp-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eebc16db6952b19d5daf098a0e91751627b8bea0d3fc10c37376b8ca1d6998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116440
Malicious code in atlas-transform-taurus-xanthus npm...
EUVD-2025-121166
Malicious code in transform-dorado-phoenix-mensa npm...
Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121159
Malicious code in transform-node-sass-jwt-mutation npm...
EUVD-2025-113367
Malicious code in fusion-redis-transform-tailwindcss npm...
EUVD-2025-113864
Malicious code in eslint-plugin-transform-semantic-ui-yakutsk npm...
EUVD-2025-121157
Malicious code in transform-pegasus-browserify-docusaurus npm...
Malicious code in ursa-commitlint-transform-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb28edfc6231cf265a832bc4221e5e5b761e862f2c5a22c556cb296ab24fa246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121707
Malicious code in spinner-zenobia-transform-local npm...
EUVD-2025-123665
Malicious code in pino-xanthus-got-transform npm...
EUVD-2025-121149
Malicious code in transform-xo-eridanus-express npm...
Malicious code in transform-xo-eridanus-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb820e1534cb90c0d94a2ead0284f4c60efdbb87ab1d40999e2915c495e6557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111278
Malicious code in meissa-supervisor-markdown-transform npm...
EUVD-2025-123546
Malicious code in polaris-transform-firebase-quasar npm...
EUVD-2025-114090
Malicious code in enceladus-astro-changelog-transform npm...
EUVD-2025-121383
Malicious code in terser-webpack-plugin-csv-transform-native npm...