485 matches found
EUVD-2025-113157
Malicious code in global-zenith-cz-conventional-changelog-reveal-md npm...
EUVD-2025-112683
Malicious code in husky-semantic-release-zenith-iota npm...
EUVD-2025-115391
Malicious code in chariklo-zenith-proxima-configstore npm...
EUVD-2025-120948
Malicious code in unuk-iota-zenith-html-webpack-plugin npm...
EUVD-2025-124182
Malicious code in oauth-zenith-pino-pretty-xenos npm...
EUVD-2025-114497
Malicious code in despina-zenith-cluster-polaris npm...
Malicious code in registry-zenith-redis-elara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3548f1d4c8fe3a799f8b4223195ae7594aa056e62b63f20ee05bea9627c9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111888
Malicious code in kronos-sagitta-zenith-ganymede npm...
EUVD-2025-123097
Malicious code in publish-zenith-cygnus-nashira npm...
EUVD-2025-120077
Malicious code in zenith-mutation-enif-pyxis npm...
EUVD-2025-113158
Malicious code in global-zenith-child-process-await npm...
EUVD-2025-120084
Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...
EUVD-2025-123074
Malicious code in pulsar-zenith-triton-miranda npm...
EUVD-2025-124530
Malicious code in neptune-zenith-fornax-husky npm...
Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115678
Malicious code in carpo-antd-less-zenith npm...
MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carpo-antd-less-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...