EUVD-2025-121074

Malicious code in typeorm-pipe-dynamo-jwt npm...

EUVD-2025-112041

Malicious code in jwt-figures-ora-commitizen npm...

EUVD-2025-112032

Malicious code in jwt-nebula-module-colors npm...

MAL-2025-143804 Malicious code in janus-cors-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab10dd4a20efdee524a8a1e195d284589d12d19dfdb7436f4055a944dc3aa658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-redis-jwt-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029211974165cff66e42351cf6175e104e89284a986f021fc112f1c0b00c02c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123873

Malicious code in pegasus-redis-jwt-semantic-ui npm...

EUVD-2025-112030

Malicious code in jwt-publish-hermes-miranda npm...

EUVD-2025-112021

Malicious code in jwt-wolf-solis-query npm...

EUVD-2025-116533

Malicious code in arcturus-fork-cassini-jwt npm...

EUVD-2025-123321

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...

EUVD-2025-120937

Malicious code in update-chai-non-blocking-jwt npm...

EUVD-2025-112038

Malicious code in jwt-gravity-europa-hexo npm...

EUVD-2025-115684

Malicious code in carina-resolvers-jwt-xo npm...

Malicious code in jwt-publish-hermes-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed0d9ac5f74a79bcc66d9aaa67b60d041eebe36f6287a5dd01a2cc9ff9c830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-leda-framework-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112025

Malicious code in jwt-test-elektra-sails npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

MAL-2025-144070 Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64386

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

CVE-2025-64386 HIJACKING OF THE TOKEN AND GAINING ACCESS

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...