288 matches found
MAL-2025-191044 Malicious code in @opentermsarchive/engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...
Malicious code in generator-meteor-stock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190824 Malicious code in @quick-start-soft/quick-task-refine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b916ec147b8ea7421a203e04aee7554ffafacffd6a0aa576031a36f8773dc41 The package @quick-start-soft/quick-task-refine was found to contain malicious code. Source: ghsa-malware...
Malicious code in zuper-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df939c793cc77c055c399930ea5b042f3873bf3e852d94c4c4fcd9388135f0b7 The package zuper-cli was found to contain malicious code. Source: ghsa-malware 303dadde5b88a63ca4d3dd7ef7a5c163dd833cd9505ac628409138e7b4a73401 Any...
Malicious code in finastealer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7bc3399f7c9533d933b6b0cfa2271b787007a591ab8bba88ee3c19c476e7d6 The package finastealer was found to contain malicious code. Source: ghsa-malware ae3d441979a14b8b5d0d5fed15f7ff3a0984d6cbb5a08a788485a0986c85def7 An...
EUVD-2025-94454
Malicious code in uncertainmosquitoz3n npm...
EUVD-2025-94456
Malicious code in uncertainanacondaz3n npm...
EUVD-2025-88217
Malicious code in uncertainhaddockz3n npm...
Malicious code in uncertain_sawfish-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4d728b18cbbe0941690a275030ab36d38ea6bcf9baec9d4405f5d56de3e81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110040 Malicious code in uncertain_sawfish-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4d728b18cbbe0941690a275030ab36d38ea6bcf9baec9d4405f5d56de3e81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in uncertain_spoonbill_azure-19 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dea16fbd7b8a523ffc2d402e83c418270265f4f1af2b1a2fade5ce2ea5c74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77488
Malicious code in uncertainspoonbillazure-19 npm...
Malicious code in uncertain_scallop_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd792007a290f8b5234380fec4b5c2facb2a7f5c3de689bffe32b4550f4ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78049
Malicious code in uncertainmammalz3n npm...
MAL-2025-110038 Malicious code in uncertain_mammal_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa4c8c1c75fbb6d78b6ff36ebe3d330ae03debc4978f8639cfb7c99a5d3c9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80222
Malicious code in uncertainclamdumbs npm...
MAL-2025-76660 Malicious code in transform-es2015-block-scoping (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e96489b1847106951744b2eb46d3c771d38406ff77d148fa97dd349910a934c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-76658 Malicious code in no-barrel-files (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26ffac772339a03c38a909739d6648394caa3bf5f5d6052d35cb5c0ef21ac33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...