7273 matches found
EUVD-2025-180240
Malicious code in auriga-eslint-halley-fetch npm...
EUVD-2025-180511
Malicious code in accretion-avior-radiometric-fetch npm...
Malicious code in winston-process-fetch-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32310e6d14f06422f625862322cf64c1e6a08c795148c10b8a5c50e384c2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in html-webpack-plugin-vega-atlas-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fd14fbfa7df3518df196ac7331d4c07644a19e457f73f31be91ee9ab01ce42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178504
Malicious code in html-webpack-plugin-vega-atlas-fetch npm...
Malicious code in command-leda-fetch-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5feb6e2ef6c9afe8aa0d51f1a5b382e86c7f05202802ce99f9d5296a1ce376d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178104
Malicious code in library-fetch-hyperion-vortex npm...
EUVD-2025-175758
Malicious code in ursa-rest-fetch-thermochronology npm...
EUVD-2025-177807
Malicious code in miranda-koa-fetch-duplex npm...
CVE-2025-64752: Server-Side Request Forgery (SSRF)
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
EUVD-2025-114488
Malicious code in development-heka-fetch-deimos npm...
Malicious code in iota-fetch-cressida-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112224
Malicious code in javascript-readable-fetch-nconf npm...
Malicious code in fetch-eleventy-phenomic-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f18667d25c0946f9d261a0c1f9af093e7d6eae0fe031657ef5f01630c15a873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113660
Malicious code in fetch-meteor-leda-materialize npm...
EUVD-2025-113662
Malicious code in fetch-jasmine-frontend-equinox npm...
EUVD-2025-111529
Malicious code in luna-ultra-fetch-odin npm...