1670 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198735
Malicious code in @zapier/eslint-plugin-zapier npm...
Malicious code in @zapier/eslint-plugin-zapier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198769
Malicious code in eslint-config-zeallat-base npm...
Malicious code in eslint-config-zeallat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fe7c28614bd60fe323d92db35df502ed3c1c9076a708815031e1a78311c6e The package eslint-config-zeallat-base was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190772 Malicious code in eslint-config-zeallat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fe7c28614bd60fe323d92db35df502ed3c1c9076a708815031e1a78311c6e The package eslint-config-zeallat-base was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190695 Malicious code in eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715567b8ffcce461fdad7a03986cd0ca9569785f6a0dcfad594a041fce4c88bb The package eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
Malicious code in eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715567b8ffcce461fdad7a03986cd0ca9569785f6a0dcfad594a041fce4c88bb The package eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198661
Malicious code in eslint-config-trigo npm...
MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
Malicious code in @trigo/eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198667
Malicious code in @trigo/eslint-config-trigo npm...
CVE-2025-64718 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, vitess, kubeflow-katib, lerna, saf, py3-jupyterlab, thingsboard, tileserver-gl, eslint, opensearch-dashboards, kubeflow-pipelines, pulumi, renovate, argo-workflows, prism, sqlpad, code-server...
GHSA-MH29-5H37-FV8M vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, vitess, kubeflow-katib, lerna, saf, py3-jupyterlab, thingsboard, tileserver-gl, eslint, opensearch-dashboards, kubeflow-pipelines, pulumi, renovate, argo-workflows, prism, sqlpad, code-server...
GHSA-MH29-5H37-FV8M vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, gitlab-rails-ce-fips, kibana, tensorflow-cpu-jupyter, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, thingsboard, opensearch-dashboards-fips, pulumi, librechat, prism, wazuh-dashboard-fips, argo-workflows, code-server, gitlab-rails-c...
CVE-2025-64718 vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, gitlab-rails-ce-fips, kibana, tensorflow-cpu-jupyter, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, thingsboard, opensearch-dashboards-fips, pulumi, librechat, prism, wazuh-dashboard-fips, argo-workflows, code-server, gitlab-rails-c...
Malicious code in luna-mira-eslint-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68370c7fb19d1cf0730a09b2a14c5c2b57ee9fa7cb0c3a9a10b30feb22bc4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...