Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55548

Malicious code in busy-red-crow npm...

Malicious code in busy-red-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c6fe9c8bac6d35cac5380035fffe7d7ebf5fed0054472cba672fdba088f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53780

Malicious code in individual-moccasin-crow npm...

EUVD-2025-56445

Malicious code in workingcrowz3n npm...

EUVD-2025-57830

Malicious code in pregnantcrowz3n npm...

Malicious code in inland_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9fd04ef2a52b9448449e8f896c26aca51b9eaf92bc8446adae3a546c5780c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60683 Malicious code in inland_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9fd04ef2a52b9448449e8f896c26aca51b9eaf92bc8446adae3a546c5780c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49793

Malicious code in moaningcrowz3n npm...

MAL-2025-60326 Malicious code in dusty_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ef70512585cb0894edae61af39f53d69ff76af2a5c9e57709067a7b7f3b6a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44387

Malicious code in yabberingcrowz3n npm...

EUVD-2025-45188

Malicious code in stripedcrowz3n npm...

EUVD-2021-10752

Malware in sbrugna...

EUVD-2021-10482

Malware in sbrugna...

EUVD-2022-41237

Malicious code in bioql PyPI...

EUVD-2022-41236

Malicious code in bioql PyPI...

EUVD-2023-29980

Malicious code in bioql PyPI...

CVE-2023-26142

All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not properly sanitized against CRLF Injection in the setheader and addheader functions. An attacker can add the \r\n carriage return line feeds...

CVE-2022-34970

Crow before 1.0+4 has a heap-based buffer overflow via the function qsparse in querystring.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service...