237 matches found
Malicious Package
Overview jest-xenon-virgo-jest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2018-14089
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
Malicious code in indus-virgo-publish-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e343e832dcd592b7407aaea23128dadf679e0c78cc297bbd29ff497ab04dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in photon-airbnb-virgo-websockets (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c86807e608c5b48c721b687275aad0c86c57fac80d36be0425e26e2fd6085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-async-astrobiology-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e656b9f20e0942219d52184b8fc5ea29dce1db22e46b4ed79b479c6566d1bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-joviology-proxima-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176062
Malicious code in tardigrade-virgo-hologram-yaml npm...
EUVD-2025-176014
Malicious code in terraforming-astro-virgo-toml npm...
EUVD-2025-175937
Malicious code in titan-fusion-virgo-slides npm...
EUVD-2025-175771
Malicious code in ursa-comet-cosmogenic-virgo npm...
EUVD-2025-175722
Malicious code in virgo-airbnb-accretion-backend npm...
EUVD-2025-175720
Malicious code in virgo-async-astrobiology-nashira npm...
EUVD-2025-175717
Malicious code in virgo-framework-dependencies-firebase npm...
EUVD-2025-175716
Malicious code in virgo-joviology-proxima-install npm...
EUVD-2025-175715
Malicious code in virgo-terser-webpack-plugin-resonance-jekyll npm...
EUVD-2025-177809
Malicious code in miranda-genomics-uninstall-virgo npm...