2431 matches found
EUVD-2025-178299
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...
EUVD-2025-179393
Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...
SUSE CVE-2025-64486
calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...
CVE-2025-64486
A vulnerability has been identified in Calibre. It does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve arbitrary code executi...
EUVD-2025-113422
Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres npm...
EUVD-2025-121519
Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...
EUVD-2025-114953
Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124055
Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze npm...
EUVD-2025-121773
Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local npm...
EUVD-2025-112711
Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124064
Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...
EUVD-2025-112820
Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin npm...
EUVD-2025-121583
Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares npm...
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124057
Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius npm...
EUVD-2025-113914
Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124052
Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax npm...
EUVD-2025-111277
Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota npm...
Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...