7383 matches found
EUVD-2025-180051
Malicious code in biosignature-nestjs-publish-morgan npm...
CVE-2025-64718: Improperly Controlled Modification of Object Prototype Attributes
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
EUVD-2025-121061
Malicious code in uglify-js-bunyan-solis-neptune npm...
EUVD-2025-121045
Malicious code in uglify-js-spectron-colors-server npm...
EUVD-2025-121047
Malicious code in uglify-js-restart-delphinus-hugo npm...
EUVD-2025-121059
Malicious code in uglify-js-child-process-meissa-firebase npm...
EUVD-2025-122700
Malicious code in release-it-eslint-nodejs-titan npm...
EUVD-2025-124498
Malicious code in nextjs-procyon-postcss-chai npm...
EUVD-2025-124203
Malicious code in nuxtjs-uglify-js-loopback-comet npm...
EUVD-2025-121048
Malicious code in uglify-js-quito-ursa-fomalhaut npm...
EUVD-2025-121062
Malicious code in uglify-js-blaze-rocket-dorado npm...
EUVD-2025-112580
Malicious code in ignite-xenos-uglify-js-hugo npm...
EUVD-2025-120185
Malicious code in xo-despina-uglify-js-neptune npm...
EUVD-2025-123994
Malicious code in package-dactyl-callisto-nuxtjs npm...
MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120766
Malicious code in virgo-nuxtjs-achernar-spectron-webdriver npm...
EUVD-2025-122050
Malicious code in sequelize-nashira-rigel-uglify-js npm...
Malicious code in sequelize-nashira-rigel-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59d6fb63fb5556a47a76185951f64c80c5d8364358472ed927bf91c9fa3fdcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...