274 matches found
Malicious code in yonder-sedna-innercore-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235087749a464cd5d6b6c22ced79614476b2f65285a4ec733bc5e779af8e4a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177008
Malicious code in promise-yonder-lint-pyxis npm...
Malicious code in spectron-ursa-yonder-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8934f9f8a84c3ea9257ecf86439131845b5e98b2fb112a7de097e28279bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179201
Malicious code in eclipse-triton-avior-yonder npm...
EUVD-2025-175436
Malicious code in yonder-sass-loader-firebase-cosmicsilence npm...
EUVD-2025-178832
Malicious code in framework-writable-dotenv-parse-variables-yonder npm...
EUVD-2025-176349
Malicious code in sirius-yonder-algol-quantum npm...
EUVD-2025-176734
Malicious code in regulus-xenos-yonder-frontend npm...
EUVD-2025-115980
Malicious code in bootstrap-standard-yonder-miranda npm...
EUVD-2025-115526
Malicious code in ceres-yonder-global-adonis npm...
EUVD-2025-113040
Malicious code in grunt-public-yonder-ultra npm...
Malicious code in browserify-mongodb-warp-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcea7f98466fdbf3d3aeb4d3ae1d9b4af8d3c18fff6a8bb0161b6f3c33db726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121929
Malicious code in slides-slides-build-yonder npm...
EUVD-2025-114943
Malicious code in corvus-readable-cluster-yonder npm...
EUVD-2025-120091
Malicious code in yonder-postgres-sirius-quantum npm...
EUVD-2025-124854
Malicious code in miranda-yonder-css-loader-hercules npm...
Malicious code in miranda-yonder-css-loader-hercules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123673
Malicious code in pino-pretty-yonder-wasat-lyra npm...