4609 matches found
EUVD-2025-177024
Malicious code in procyon-yaml-figures-toml npm...
EUVD-2025-179070
Malicious code in eridanus-react-bootstrap-telesto-yaml npm...
MAL-2025-186704 Malicious code in electron-postcss-loader-yaml-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190421 Malicious code in yaml-barnard-jekyll-magnetar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176477
Malicious code in secure-phi-web-yaml-socket npm...
EUVD-2025-175447
Malicious code in yaml-phoenix-sequelize-redshift npm...
EUVD-2025-175862
Malicious code in try-stub-yaml-query-awk npm...
EUVD-2025-177906
Malicious code in meissa-steganography-helmet-yaml npm...
EUVD-2025-180141
Malicious code in bad-xml-simple-yaml-reject npm...
EUVD-2025-177739
Malicious code in mui-reveal-md-registry-yaml npm...
EUVD-2025-175958
Malicious code in theta-yaml-compress-rain-star npm...
EUVD-2025-178857
Malicious code in fork-winston-apollo-yaml npm...
Malicious code in wind-quick-char-yaml-thread (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178127
Malicious code in less-loader-gulp-yaml-crust npm...
EUVD-2025-178200
Malicious code in key-kernel-transpile-test-yaml npm...
EUVD-2025-175620
Malicious code in web-yaml-analyze-finally-short npm...
EUVD-2025-178534
Malicious code in hermes-version-mdx-yaml npm...