EUVD-2025-114289

Malicious code in duplex-sequelize-blitz-odin npm...

EUVD-2025-120779

Malicious code in virgo-blitz-dagda-babel npm...

MAL-2025-146543 Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124198

Malicious code in oauth-blitz-nestjs-pipe npm...

EUVD-2025-120303

Malicious code in xanthus-indus-umbra-blitz npm...

EUVD-2025-116146

Malicious code in bellatrix-rest-blitz-style-loader npm...

EUVD-2025-116055

Malicious code in blitz-impulse-geckodriver-polaris npm...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116064

Malicious code in blitz-cosmiconfig-google-pino-pretty npm...

MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116039

Malicious code in blitz-tailwindcss-json-start npm...

EUVD-2025-116052

Malicious code in blitz-lint-odin-cache npm...

EUVD-2025-124719

Malicious code in mui-cypress-blitz-cygnus npm...

EUVD-2025-116059

Malicious code in blitz-enceladus-hercules-spica npm...

EUVD-2025-115674

Malicious code in carpo-blitz-nightmare-forever npm...

EUVD-2014-5896

Malware in sbrugna...

EUVD-2014-5831

Malware in sbrugna...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-55558 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-55558 Source advisory:...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-55552 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-55552 Source advisory:...