5474 matches found
EUVD-2025-113106
Malicious code in graphql-orbit-csrf-yaml npm...
EUVD-2025-120149
Malicious code in yaml-aquarius-xenos-neptune npm...
EUVD-2025-112012
Malicious code in karma-deneb-umbra-yaml npm...
EUVD-2025-120137
Malicious code in yaml-loopback-cors-postcss npm...
EUVD-2025-116476
Malicious code in async-hugo-yaml-rimraf npm...
EUVD-2025-113032
Malicious code in grunt-yaml-testcafe-tailwindcss npm...
EUVD-2025-115736
Malicious code in canopus-proxima-yaml-puppeteer npm...
EUVD-2025-122166
Malicious code in sedna-carpo-yaml-server npm...
EUVD-2025-120132
Malicious code in yaml-ophiuchus-hyperion-style-loader npm...
Malicious code in yaml-express-cors-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114832
Malicious code in cross-env-yaml-meteor-aurora npm...
EUVD-2025-120138
Malicious code in yaml-leda-farout-kinetic npm...
Malicious code in sedna-carpo-yaml-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in canopus-proxima-yaml-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab40b667df69aafddc22f108f2d07a25f78edad369a93fe46cb65cacb2f989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122435
Malicious code in rocket-yaml-vortex-rollup-plugin npm...
EUVD-2025-120363
Malicious code in wolf-yaml-morgan-cross-env npm...
MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144944 Malicious code in middleware-andromeda-yaml-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f6da311037a5e40f15cc5c0d93d855d93fa8d6db6d06ac9d4814a114af351f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...