2138 matches found
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-179393
Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...
EUVD-2025-175628
Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...
EUVD-2025-178299
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...
EUVD-2025-177041
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...
SUSE CVE-2025-64486
calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...
CVE-2025-64486
A vulnerability has been identified in Calibre. It does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve arbitrary code executi...
EUVD-2025-111277
Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...
EUVD-2025-112542
Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...
EUVD-2025-112820
Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin npm...
EUVD-2025-121961
Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel npm...
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120998
Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...
EUVD-2025-113422
Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres npm...
EUVD-2025-124058
Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...
EUVD-2025-114953
Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...