4609 matches found
EUVD-2025-120144
Malicious code in yaml-eslint-eslint-style-loader npm...
EUVD-2025-113106
Malicious code in graphql-orbit-csrf-yaml npm...
EUVD-2025-114454
Malicious code in docusaurus-apollo-procyon-yaml npm...
EUVD-2025-112012
Malicious code in karma-deneb-umbra-yaml npm...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121816
Malicious code in spectron-bootstrap-yaml-iota npm...
EUVD-2025-121514
Malicious code in sync-antares-rehype-yaml npm...
EUVD-2025-123639
Malicious code in playwright-library-build-yaml npm...
EUVD-2025-120127
Malicious code in yaml-tailwindcss-hyperion-public npm...
Malicious code in yaml-neptune-pino-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aa67ba6d62641ea81cbaef9c324353b070c5e32a233476d4d87c62133d48ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122199
Malicious code in scorpius-yaml-ignite-process npm...
Malicious code in rocket-yaml-vortex-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113446
Malicious code in foundation-antares-yaml-vega npm...
EUVD-2025-113032
Malicious code in grunt-yaml-testcafe-tailwindcss npm...
EUVD-2025-120141
Malicious code in yaml-gatsby-yildun-less npm...
EUVD-2025-123731
Malicious code in phoebe-yaml-mongodb-umbra npm...
EUVD-2025-120134
Malicious code in yaml-nightmare-command-start npm...
Malicious code in sedna-carpo-yaml-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...