EUVD-2025-179558

Malicious code in corvus-javascript-charon-semantic-ui npm...

EUVD-2025-179012

Malicious code in europa-lynx-janus-repository npm...

EUVD-2025-176302

Malicious code in socket-table-grid-sigma-deserialize npm...

EUVD-2025-178581

Malicious code in heka-bootstrap-javascript-loopback npm...

EUVD-2025-176165

Malicious code in subduction-middleware-javascript-supernova npm...

EUVD-2025-178286

Malicious code in javascript-async-enceladus-eslint-plugin npm...

EUVD-2025-175423

Malicious code in zenobia-nightwatch-rigel-javascript npm...

EUVD-2025-178361

Malicious code in io-gulp-apollo-javascript npm...

EUVD-2025-178282

Malicious code in javascript-start-halley-eclipse npm...

EUVD-2025-178281

Malicious code in jekyll-deneb-uglify-js-paleobotany npm...

EUVD-2025-179694

Malicious code in cluster-tool-quasarjet-meteor npm...

EUVD-2025-175761

Malicious code in ursa-process-query-metabolomics npm...

EUVD-2025-176323

Malicious code in soap-callback-convict-middleware npm...

MAL-2025-186716 Malicious code in element-ui-nodejs-bellatrix-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0756d6fd922c626edc59579a4d716f23cd964716bb8b7d01a1c54534ab451d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188325 Malicious code in nodejs-csrf-sagitta-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175741

Malicious code in vega-panspermia-jwt-gemini npm...

EUVD-2025-177557

Malicious code in nodejs-csrf-sagitta-materialize npm...

Cross-site Scripting (XSS)

Overview privatebin/privatebin is a minimalist, open source online pastebin where the server has zero knowledge of pasted data. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the drag-and-drop helper when handling filenames containing HTML content. An attacker ca...

EUVD-2025-150356

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects user to any URL scheme. While most...

SUSE CVE-2025-13016

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...