10525 matches found
EUVD-2025-175994
Malicious code in test-cache-rehype-backend npm...
Malicious code in betelgeuse-backend-primatology-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5995d6d5645041f7e7ee5a9952e52c2b3df30f72996e6c50b6cc3211a8f910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180154
Malicious code in backend-nashira-rate-limiter-chromedriver npm...
Malicious code in hercules-local-ceres-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d57167e63295d71eb4e13acdee38c498bd82d462e3e2fd11611b1559029127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185357 Malicious code in abiogenesis-proxima-astro-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17178550a24192e99f40c2a9a3ba7bbd1e503c96df3ba401baff83d82ccdc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175387
Malicious code in zooarchaeology-nodemon-semantic-release-backend npm...
Siemens SIMATIC S7-1500 Improper Neutralization of Special Elements used in an SQL Command (CVE-2022-29155)
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping...
squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling
A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...
Malicious code in karma-gridsome-backend-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightmare-backend-babel-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91103deb94c614fbd1a4df900ba457667e63c12a896906cbb59532aa2c131aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in backend-venus-server-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d008aa9a3805893a743ea6743370aa37617a06e73ea348356ef209c9bf106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
Malicious code in backend-yildun-fornax-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116205
Malicious code in backend-venus-server-indus npm...
EUVD-2025-113770
Malicious code in exec-fusion-backend-corvus npm...
EUVD-2025-116222
Malicious code in backend-chariklo-bellatrix-start npm...
EUVD-2025-112810
Malicious code in hermes-backend-aether-aurora npm...