170 matches found
Malicious Package
Overview bellatrix-middleware-yildun-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
EUVD-2025-176912
Malicious code in publish-yildun-magnetosphere-process npm...
EUVD-2025-175442
Malicious code in yildun-mesosphere-redis-spectron npm...
EUVD-2025-178625
Malicious code in gulp-yildun-lacerta-webpack npm...
EUVD-2025-176231
Malicious code in standard-barnard-quark-yildun npm...
EUVD-2025-180090
Malicious code in betelgeuse-frontend-titan-yildun npm...
EUVD-2025-179479
Malicious code in cryptography-cross-env-google-yildun npm...
EUVD-2025-175444
Malicious code in yildun-cors-convict-ursa npm...
EUVD-2025-179755
Malicious code in chariklo-dysonswarm-yildun-adonis npm...
EUVD-2025-177824
Malicious code in mira-fusion-yildun-css-loader npm...
EUVD-2025-178396
Malicious code in innercore-yildun-blaze-robotics npm...
EUVD-2025-175445
Malicious code in yildun-blitz-miranda-accretion npm...
EUVD-2025-177877
Malicious code in metalsmith-antares-barnard-yildun npm...
EUVD-2025-175441
Malicious code in yildun-tethys-eigenstate-alphard npm...
EUVD-2025-177165
Malicious code in pino-pretty-yildun-express-graphql npm...
EUVD-2025-177333
Malicious code in panspermia-seismology-yildun-figures npm...
MAL-2025-187257 Malicious code in gulp-yildun-lacerta-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a274bdb3d2616b5e76f058c31ebcdd115b7a1c639d4bd9c4736f68f31c0c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mira-fusion-yildun-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-yildun-lacerta-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a274bdb3d2616b5e76f058c31ebcdd115b7a1c639d4bd9c4736f68f31c0c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...