220 matches found
EUVD-2025-53704
Malicious code in intensive-crimson-finch npm...
EUVD-2025-53714
Malicious code in intelligent-ivory-finch npm...
EUVD-2025-54774
Malicious code in drunk-moccasin-finch npm...
MAL-2025-71528 Malicious code in weary-white-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16495ae2092b46ca41fd4731cb90c0aab6b39bc28069a8b8ab8ccf8df05bef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67419 Malicious code in conscious-peach-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200a135881159e16eb7972d175541fce5ef2aba01bc489e31d7d219e35b8dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69602 Malicious code in net-amaranth-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53047
Malicious code in net-amaranth-finch npm...
EUVD-2025-55004
Malicious code in decent-chocolate-finch npm...
EUVD-2025-55052
Malicious code in curved-rose-finch npm...
Malicious code in decent-chocolate-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rainy-gold-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54321
Malicious code in financial-salmon-finch npm...
EUVD-2025-51638
Malicious code in sweet-azure-finch npm...
MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67597 Malicious code in curved-rose-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-57187
Malicious code in superiorfinchz3n npm...
Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2025-081 (ALASDOCKER-2025-081)
The version of runfinch-finch installed on the remote host is prior to 1.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-081 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than...
Amazon Linux 2023 : runfinch-finch (ALAS2023-2025-1270)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1270 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...