EUVD-2025-178445

Malicious code in import-omega-long-cloud-gamma npm...

EUVD-2025-179247

Malicious code in double-rain-protected-import-monitor npm...

EUVD-2025-177216

Malicious code in phi-void-long-reject-import npm...

Malicious code in tau-import-float-monitor-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178449

Malicious code in import-compile-compile-bad-report npm...

EUVD-2025-178443

Malicious code in import-scale-deserialize-sudo-visualize npm...

EUVD-2025-176831

Malicious code in quick-info-star-new-import npm...

EUVD-2025-178203

Malicious code in kernel-visualize-meta-import-transpile npm...

EUVD-2025-177517

Malicious code in nu-grid-import-chi-assert npm...

EUVD-2025-176243

Malicious code in spy-sun-byte-debug-import npm...

EUVD-2025-180219

Malicious code in authenticate-array-cluster-mock-import npm...

EUVD-2025-177518

Malicious code in nu-double-import-theta-old npm...

EUVD-2025-178450

Malicious code in import-benchmark-warn-node-catch npm...

EUVD-2025-178451

Malicious code in import-abstract-nu-private-decrypt npm...

EUVD-2025-179374

Malicious code in decrypt-import-info-optimize-authorize npm...

MAL-2025-188365 Malicious code in nu-grid-import-chi-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f766004c24652d0932dc06aa4b8466f33c8f680b403bc5562d701a3973417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176057

Malicious code in tau-import-float-monitor-finally npm...

EUVD-2025-178446

Malicious code in import-log-monitor-rho-function npm...

PT-2025-46780

Name of the Vulnerable Software and Affected Versions WP All Import versions up to and including 3.9.6 Description The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is susceptible to Remote Code Execution. This is caused by the use of eval on unsanitized...

PT-2025-46815

Name of the Vulnerable Software and Affected Versions WebToffee Order Export & Order Import for WooCommerce versions through 2.6.7 Description The software contains a flaw related to incorrectly configured access control, allowing for unauthorized access. The issue impacts the Order Export & Orde...