MAL-2025-141975 Malicious code in element-ui-nestjs-draco-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d3d5af2f7340132e6fed6f2da3b621668536b4d11f2c9d5b05065138ad0780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140249 Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141600 Malicious code in despina-nestjs-jovian-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc8eefaf5ddae9bf15203ad349315453e20013b6b374db712b239efdefd7ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149248 Malicious code in vulcan-nestjs-nodemon-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bca58c5db7f633962cd43a5bc3ee223af16b073b273e82fa1008712c7fafb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124519

Malicious code in nestjs-proxima-lyra-sagitta npm...

MAL-2025-140035 Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145401 Malicious code in nestjs-proxima-lyra-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fdc828d51ca9f29e59b72b62dd31866819155bfebdd1cf1d0c0c07f6369e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148669 Malicious code in titan-adonis-nestjs-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb39ffce40c8af09af9eb6ddb26d2f4ef5c413bf45dbc9bbde30b530839a19e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143733 Malicious code in iota-nestjs-firebase-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0dde942382f6ddca3adc5a8a1f9067c84a87ce3dedd4773c5f204d394ce2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Exploit for OS Command Injection in Nestjs Devtools-Integration

PoC exploit for CVE-2025-54782, a vulnerability in an unspecifie...

Exploit for Cross-Site Request Forgery (CSRF) in Nestjs Devtools-Integration

CVE-2025-54...

EUVD-2025-23413

Malicious code in bioql PyPI...

EUVD-2022-6075

Malicious code in bioql PyPI...

EUVD-2022-5976

Malicious code in bioql PyPI...

Malicious code in example-nestjs-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47666 Malicious code in example-nestjs-api (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rxnt-healthchecks-nestjs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91466f0176011b114548780f79ecab9da3b995e89243c07548ea8be6e4a7b0d9 Any computer that has this package installed or running should be considered fully compromised. All...

Malware in rxnt-healthchecks-nestjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47346 Malicious code in rxnt-healthchecks-nestjs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91466f0176011b114548780f79ecab9da3b995e89243c07548ea8be6e4a7b0d9 Any computer that has this package installed or running should be considered fully compromised. All...