534 matches found
MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116621
Malicious code in apex-magellan-winston-phoebe npm...
EUVD-2025-120402
Malicious code in winston-sqlite-typeorm-quantum npm...
EUVD-2025-120396
Malicious code in winston-wasat-gacrux-non-blocking npm...
Malicious code in winston-sqlite-typeorm-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-bootes-package-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3336ff67090dc4e941107022c3b2fe2463843101ef8cf3a59afd5e4401b546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121617
Malicious code in stop-winston-bulma-metalsmith npm...
Malicious code in parcel-winston-janus-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa490b9c442ed1f763545052dcf9ce8a51b65c8331ca58d552ddb81ba2f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in andromeda-puppeteer-winston-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114266
Malicious code in dynamo-winston-less-fornax npm...
EUVD-2025-121779
Malicious code in spectron-webdriver-winston-vega-venus npm...
EUVD-2025-115954
Malicious code in buffer-achernar-winston-triton npm...
EUVD-2025-114810
Malicious code in csrf-winston-koa-nextjs npm...
EUVD-2025-122437
Malicious code in rocket-unuk-atlas-winston npm...
EUVD-2025-120452
Malicious code in winston-ariel-apex-sagitta npm...
EUVD-2025-114427
Malicious code in docusaurus-winston-ultra-neptune npm...
EUVD-2025-123507
Malicious code in postcss-loader-winston-transport-spinner npm...