EUVD-2025-114684

Malicious code in cz-conventional-changelog-nashira-blitz-terser npm...

EUVD-2025-116060

Malicious code in blitz-dotenv-safe-chai-ganymede npm...

EUVD-2025-120742

Malicious code in vortex-phenomic-schema-blitz npm...

Malicious code in pegasus-impulse-grus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509545da991311d3beee8db0afc074abdfa583a2df12ad31f8434c955243b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116048

Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin npm...

EUVD-2025-116064

Malicious code in blitz-cosmiconfig-google-pino-pretty npm...

EUVD-2025-122409

Malicious code in rollup-plugin-eridanus-blitz-jsonp npm...

EUVD-2025-113001

Malicious code in gulp-blitz-radiant-lint npm...

Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124198

Malicious code in oauth-blitz-nestjs-pipe npm...

EUVD-2025-120303

Malicious code in xanthus-indus-umbra-blitz npm...

EUVD-2025-114289

Malicious code in duplex-sequelize-blitz-odin npm...

EUVD-2025-120779

Malicious code in virgo-blitz-dagda-babel npm...

Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2014-5896

Malware in sbrugna...

EUVD-2014-5831

Malware in sbrugna...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-55552 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-55552 Source advisory:...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-55558 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-55558 Source advisory:...