5477 matches found
EUVD-2025-120993
Malicious code in umbra-yaml-castor-axios npm...
EUVD-2025-121816
Malicious code in spectron-bootstrap-yaml-iota npm...
EUVD-2025-121514
Malicious code in sync-antares-rehype-yaml npm...
EUVD-2025-122923
Malicious code in quito-ophiuchus-jabbah-yaml npm...
EUVD-2025-122519
Malicious code in restart-yaml-celeste-writable npm...
EUVD-2025-122378
Malicious code in run-script-got-cross-env-yaml npm...
EUVD-2025-122199
Malicious code in scorpius-yaml-ignite-process npm...
EUVD-2025-123731
Malicious code in phoebe-yaml-mongodb-umbra npm...
EUVD-2025-123639
Malicious code in playwright-library-build-yaml npm...
EUVD-2025-124494
Malicious code in nextjs-xml-yaml-fork npm...
EUVD-2025-124021
Malicious code in ora-yaml-yildun-node-sass npm...
EUVD-2025-123918
Malicious code in pavo-mongoose-yaml-development npm...
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
EUVD-2025-120395
Malicious code in winston-yaml-webdriver-mocha-repository npm...
EUVD-2025-120133
Malicious code in yaml-nodemon-spectron-pino npm...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113416
Malicious code in framework-wolf-yaml-electron-builder npm...
EUVD-2025-116631
Malicious code in antd-yaml-rate-limiter-zenobia npm...