236660 matches found
EUVD-2025-198154
Malicious code in node-calculator-cf8c npm...
EUVD-2025-198146
Malicious code in alicenpmpackage13 npm...
EUVD-2025-198144
Malicious code in alicenpmpackage1 npm...
EUVD-2025-198131
Malicious code in react-svg-module npm...
MAL-2025-190571 Malicious code in react-svg-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e399f2b08fcb5a17dce3bb49a4f5dbeec6d8c56b34dab5586e8a84c5232d08 The package react-svg-helper was found to contain malicious code. Source: ghsa-malware f872307ebcfe0abab5b4fb796f5d770fd3678292ff059768bc62144d97fe03...
EUVD-2025-198135
Malicious code in werufgugweuiguiwergqui npm...
MAL-2025-190575 Malicious code in werufgugweuiguiwergqui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0713cad30ef783b4e799858b0b42ec77487f58a9ab6ac77c9941ee1f3bdf8b The package werufgugweuiguiwergqui was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198136
Malicious code in kc-next npm...
MAL-2025-190574 Malicious code in kc-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...
esm.sh 路径遍历漏洞
esm.sh is a content distribution network open-sourced by esm.sh. A path traversal vulnerability exists in versions prior to esm.sh 136, which stems from path traversal during the decompression of NPM packages, and could lead to arbitrary file writes...
PT-2025-47503
Name of the Vulnerable Software and Affected Versions esm.sh versions prior to 136 Description The esm.sh CDN service is susceptible to a path traversal issue during the extraction of NPM package tarballs. An attacker can create a malicious NPM package with crafted file paths, such as...
EUVD-2025-198096
Malicious code in captcha-paypal npm...
Malicious code in captcha-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358456d344b5a4b2a92cb9b9094bafcf797200b5a0b6549e46175fbbfff70fa4 The package captcha-paypal was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in security-testing-research22 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64907ea19ad2bdfcd9821121cf13c4cc8445a34d72575729369913b0b7bd9084 The package security-testing-research22 was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198097
Malicious code in security-testing-research22 npm...
Malicious code in tailwindcss-breezium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190564 Malicious code in tailwindcss-breezium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...
Malicious code in @profmego/alipay-babyblue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23 The package @profmego/alipay-babyblue was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190558 Malicious code in @profmego/alipay-babyblue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23 The package @profmego/alipay-babyblue was found to contain malicious code. Source: ghsa-malware...