422 matches found
PT-2026-6285
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2020-7626
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
EUVD-2025-176890
Malicious code in puppeteer-tailwindcss-karma-postcss npm...
EUVD-2025-177006
Malicious code in prompts-commitlint-canopus-karma npm...
EUVD-2025-177396
Malicious code in oscillation-readable-supernova-karma npm...
Malicious code in puppeteer-tailwindcss-karma-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9679267623f6c6b49f81c8f19e9f271e992336207668f965e6348a4c9bbf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178645
Malicious code in gridsome-procyon-karma-callback npm...
Malicious code in karma-cross-env-mocha-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178213
Malicious code in karma-spectron-parcel-aether npm...
EUVD-2025-178256
Malicious code in json-miranda-karma-auth0 npm...
EUVD-2025-178040
Malicious code in local-ursa-karma-mysql npm...
EUVD-2025-178214
Malicious code in karma-remark-meissa-quasarjet npm...
Malicious code in local-ursa-karma-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178461
Malicious code in ichnology-materialize-neptune-karma npm...
MAL-2025-187666 Malicious code in karma-cross-env-mocha-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176778
Malicious code in readable-karma-xml-fusion npm...
EUVD-2025-176028
Malicious code in tectonophysics-levels-zenith-karma npm...