534 matches found
EUVD-2025-124266
Malicious code in nova-configstore-envconfig-winston npm...
EUVD-2025-120405
Malicious code in winston-selenium-epimetheus-proxima npm...
EUVD-2025-114764
Malicious code in csv-kastra-install-winston npm...
EUVD-2025-113747
Malicious code in exec-winston-loop-nightwatch npm...
EUVD-2025-113946
Malicious code in eris-carpo-changelog-winston npm...
EUVD-2025-113449
Malicious code in fornax-winston-browserify-registry npm...
Malicious code in blitz-winston-vuetify-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121229
Malicious code in toml-antares-winston-octans npm...
EUVD-2025-120438
Malicious code in winston-eslint-plugin-quark-sagitta npm...
EUVD-2025-124725
Malicious code in mui-altair-winston-equinox npm...
EUVD-2025-120403
Malicious code in winston-sirius-lynx-publish npm...
EUVD-2025-116066
Malicious code in blaze-winston-mensa-betelgeuse npm...
EUVD-2025-121428
Malicious code in telesto-readable-forever-winston npm...
Malicious code in loop-mensa-xml-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115979
Malicious code in bootstrap-terser-webpack-plugin-winston-link npm...
EUVD-2025-121885
Malicious code in soap-winston-antares-nodejs npm...
EUVD-2025-115752
Malicious code in callisto-winston-socketio-dependencies npm...
Malicious code in winston-neptune-standard-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6100c7d0ff6d29306a6d718fbbbdcad4feab4d3512e557e86af8454531cfdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...