274 matches found
EUVD-2025-180255
Malicious code in async-yonder-hadron-meteor npm...
EUVD-2025-175436
Malicious code in yonder-sass-loader-firebase-cosmicsilence npm...
EUVD-2025-178441
Malicious code in impulse-blaze-yonder-eleventy npm...
Malicious code in yonder-sedna-innercore-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235087749a464cd5d6b6c22ced79614476b2f65285a4ec733bc5e779af8e4a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175440
Malicious code in yonder-fermion-delphinus-transform npm...
EUVD-2025-180254
Malicious code in async-yonder-void-gravity npm...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...
EUVD-2025-175434
Malicious code in yonder-webdriverio-lynx-blackhole npm...
EUVD-2025-175435
Malicious code in yonder-sedna-innercore-slidev npm...
EUVD-2025-177435
Malicious code in ophiuchus-yonder-magellan-remark npm...
EUVD-2025-178832
Malicious code in framework-writable-dotenv-parse-variables-yonder npm...
EUVD-2025-176349
Malicious code in sirius-yonder-algol-quantum npm...
EUVD-2025-176262
Malicious code in spectron-ursa-yonder-command npm...
EUVD-2025-175437
Malicious code in yonder-rollup-dynamo-build npm...
EUVD-2025-175433
Malicious code in yonder-xerxes-xanthus-halley npm...
EUVD-2025-177008
Malicious code in promise-yonder-lint-pyxis npm...
Malicious code in yonder-less-loader-ini-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spectron-ursa-yonder-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8934f9f8a84c3ea9257ecf86439131845b5e98b2fb112a7de097e28279bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...