236628 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue. Mitigation Mitigation for this issue is eithe...
MAL-2025-190929 Malicious code in @ensdomains/ccip-read-cf-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3f5e0ef4b518b71e371b472de64525c90fa98305becf54d8e15279e4d5d766 The package @ensdomains/ccip-read-cf-worker was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198975
Malicious code in @ensdomains/ccip-read-cf-worker npm...
Malicious code in @ensdomains/op-resolver-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def95ef69b4dd7da38ca7a697fb0eabff2ae2fe2eff4f31957254a207346bd0 The package @ensdomains/op-resolver-contracts was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198976
Malicious code in @ensdomains/op-resolver-contracts npm...
EUVD-2025-198977
Malicious code in @ensdomains/ens-test-env npm...
EUVD-2025-198978
Malicious code in @ensdomains/durin npm...
EUVD-2025-198979
Malicious code in @ensdomains/ens-contracts npm...
EUVD-2025-198899
Malicious code in zapier-platform-legacy-scripting-runner npm...
Malicious code in zapier-platform-legacy-scripting-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90298308f4d64cfb41746e3f65bcdbae9f4d790f7db3034608ea5d520aa73cc The package zapier-platform-legacy-scripting-runner was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198911
Malicious code in @seung-ju/react-native-action-sheet npm...
EUVD-2025-198913
Malicious code in @postman/wdio-allure-reporter npm...
Malicious code in @posthog/customerio-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5c661564ccb733d65528965f85302bd0153cc1e8a4e3807e67eb528d73cd55 The package @posthog/customerio-plugin was found to contain malicious code. Source: google-open-source-security...
Malicious code in @posthog/nextjs-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...
Malicious code in @zapier/mcp-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...