6786 matches found
MAL-2025-190340 Malicious code in winston-process-fetch-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32310e6d14f06422f625862322cf64c1e6a08c795148c10b8a5c50e384c2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180449
Malicious code in alphard-fetch-electron-builder-levels npm...
MAL-2025-186959 Malicious code in fetch-readable-spectron-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63589f0ebd1c39360f807094399bb7293af123a3f30940dd806d287be6c8076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180240
Malicious code in auriga-eslint-halley-fetch npm...
EUVD-2025-179649
Malicious code in command-leda-fetch-delphinus npm...
MAL-2025-185543 Malicious code in arcturus-fornax-thuban-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009c927b5e00df689b7d6fb41e960faddd6fa557d4deb76f787a5556c51e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64752: Server-Side Request Forgery (SSRF)
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
EUVD-2025-112224
Malicious code in javascript-readable-fetch-nconf npm...
Malicious code in octans-venus-fetch-capella (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113672
Malicious code in fetch-corvus-auth-charon npm...
EUVD-2025-114456
Malicious code in dione-warp-fetch-wasat npm...
EUVD-2025-112527
Malicious code in ini-delphinus-fetch-sync npm...
Malicious code in fetch-virgo-nashira-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120387
Malicious code in wolf-comet-fetch-aether npm...
EUVD-2025-121873
Malicious code in socketio-fetch-deneb-redis npm...
EUVD-2025-121872
Malicious code in socketio-fetch-jekyll-bellatrix npm...
EUVD-2025-123790
Malicious code in phenomic-element-ui-publish-fetch npm...