7371 matches found
EUVD-2025-177753
Malicious code in morgan-sass-loader-release-it-quark npm...
Malicious code in release-it-nova-orbit-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ab3495ac1d9fef2ffac460dccd2454e48b85c3df2a2fa18a230ee9b876907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175501
Malicious code in xenon-release-it-telesto-jabbah npm...
MAL-2025-189168 Malicious code in release-it-perseus-ini-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104971ab1956bef5ba298bf575f621a9701915460abbdf6ed5d42771db7e9dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179932
Malicious code in bunyan-release-it-carpo-request npm...
EUVD-2025-178340
Malicious code in iota-release-it-stream-xenos npm...
EUVD-2025-176711
Malicious code in release-it-juno-cypress-ganymede npm...
EUVD-2025-176712
Malicious code in release-it-indus-promise-xml npm...
EUVD-2025-176713
Malicious code in release-it-biogeochemistry-geoarchaeology-protractor npm...
EUVD-2025-177833
Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it npm...
EUVD-2025-178555
Malicious code in helmet-release-it-enceladus-figures npm...
EUVD-2025-178836
Malicious code in framework-release-it-fornax-non-blocking npm...
EUVD-2025-180065
Malicious code in biohacking-release-it-augmentedreality-janus npm...
EUVD-2025-175938
Malicious code in titan-enceladus-release-it-callisto npm...
EUVD-2025-176964
Malicious code in proxima-dotenv-safe-carpo-release-it npm...
EUVD-2025-176714
Malicious code in release-it-apollo-norma-vuepress npm...
MAL-2025-185950 Malicious code in bunyan-release-it-carpo-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a0f1e12655c75f70e2c1d052cca1e4b0508a72ebf895e2f00f3b0db2b3a712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2022-4983
The CVE-2022-4983 issue affects TEC-IT TBarCode 11.15, specifically the TBarCode11.ocx ActiveX/OCX control’s INI-based licensing handling. Reported as enabling remote creation of files on the host filesystem, the vulnerability can lead to code execution or persistence within the hosting process c...
CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create
TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...