733 matches found
Malicious Package
Overview hapi-lint is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in hapi-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90adf52f1b608bcddb8f6471e64ded19817bef1b8aa1715256182f0e7a3ab690 The package hapi-lint was found to contain malicious code. Source: ghsa-malware 388b8a57423bf6789ce0a82c22d6856663fcbc1cd2ff7ce5c6f7ef701567c19e Any...
CVE-2019-12741
XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...
EUVD-2025-198848
Malicious code in @trigo/hapi-auth-signedlink npm...
Malicious code in @trigo/hapi-auth-signedlink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed6824ae90bafaade2c426612b295defed6107b61296445aa2d1d728729c23b The package @trigo/hapi-auth-signedlink was found to contain malicious code. Source: ghsa-malware...
Prototype Pollution
@hapi/pez is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of multipart payloads, allowing an attacker to craft a part whose content becomes the payload object's prototype, which enables bypassing validation rules or causing exceptions when accessing the request...
EUVD-2025-178603
Malicious code in hapi-zenobia-ophiuchus-quantum npm...
Malicious code in hapi-cross-env-subduction-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40ef79d55d711a81f41e27b0ebbed64b13ba05ad6e7de94c557da9e8c1ea416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175808
Malicious code in unuk-hapi-cross-env-nashira npm...
EUVD-2025-178606
Malicious code in hapi-orogeny-tardigrade-rate-limiter npm...
Malicious code in palynology-cybernetics-schema-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb449bb955da5853cbd3c10edec33c18b47b924c86c52bd0f4d8d627cbc741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177924
Malicious code in mechatronics-augmentedreality-hapi-jupiter npm...
EUVD-2025-177095
Malicious code in postcss-loader-hapi-publish-event npm...
EUVD-2025-177342
Malicious code in palynology-cybernetics-schema-hapi npm...
MAL-2025-189778 Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179475
Malicious code in csrf-callisto-hapi-nextjs npm...
EUVD-2025-175913
Malicious code in transform-carpo-charon-hapi npm...
Malicious code in iota-hugo-mongoose-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d5dd37b1d3a02248bee4b3d4f536393bee7b92c3c8e07a12e1e35b6cfdb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...