7064 matches found
EUVD-2025-115909
Malicious code in build-unuk-uglify-js-configstore npm...
EUVD-2025-124005
Malicious code in orbit-uglify-js-jsonp-jekyll npm...
MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123994
Malicious code in package-dactyl-callisto-nuxtjs npm...
EUVD-2025-121210
Malicious code in toml-nestjs-achernar-spectron npm...
Malicious code in atlas-uglify-js-dependencies-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in perseus-ora-spawn-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121712
Malicious code in spinner-uglify-js-sequelize-sync npm...
EUVD-2025-116068
Malicious code in blaze-uglify-js-schema-subscription npm...
EUVD-2025-121063
Malicious code in uglify-js-apollo-cosmos-karma npm...
EUVD-2025-123819
Malicious code in perseus-ora-spawn-uglify-js npm...
PT-2025-46851
Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 4.1.1 Description js-yaml is a JavaScript YAML parser and dumper. A flaw exists where an attacker can alter the prototype of a parsed YAML document, leading to prototype pollution. This impacts users parsing untrusted...
EUVD-2025-75204
Malicious code in worriedcod-gooddev npm...
EUVD-2025-62316
Malicious code in regionalfireflyz3n npm...
CVE-2025-13018
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...
EUVD-2025-44032
Malicious code in reactjs-fabric npm...
CVE-2025-64167: Improper Neutralization of Input During Web Page Generation
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to a cross-site scripting attack leading to JS execution when editing the URL parameter. Versions 2.7.13 and 3.2.2 don't use export.php, which was deprecated. They use export-v2.php instead...