236664 matches found
Malicious code in filifecycleserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f108c68df2e2b35511f57d14d387ae5fe27a28b440bcbcd2e7b55bf30b8cd6f The package filifecycleserv-paypal was found to contain malicious code. Source: ghsa-malware...
CVE-2025-13204
The npm package expr-eval is vulnerable to Prototype Pollution due to prototype contamination in the express eval interface. An attacker exploiting this vulnerability can leverage the JavaScript prototype-based inheritance model to achieve arbitrary code execution . This issue has been observed i...
EUVD-2025-197614
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
EUVD-2025-180550
Malicious code in loger-parser npm...
Malicious code in loger-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...
Malicious code in tailwindcss-setflex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d80169fb6c203bac400f4a79925a5a54eef1ef740164552a568e6e6604f9427 The package tailwindcss-setflex was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-180551
Malicious code in tailwindcss-setflex npm...
MAL-2025-190495 Malicious code in chain-test-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e0c036eeb1631fbe88e6fc1c18dc89f31a900e1d528bd2027a2aef1eb35a60 The package chain-test-async was found to contain malicious code. Source: ghsa-malware c1d03d8b6de88ac68ebdd7ea00a039ed4f3d071cda41ca8e038c5cad8eb212...
Malicious code in validator-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a The package validator-node was found to contain malicious code. Source: ghsa-malware d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333...
EUVD-2025-180554
Malicious code in chai-test-async npm...
EUVD-2025-177180
Malicious code in com.unity.polyspatial npm...
EUVD-2025-175356
Malicious code in bitsight npm...
EUVD-2025-175355
Malicious code in form-classifier npm...
Malicious code in form-classifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...
MAL-2025-190491 Malicious code in form-classifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...
MAL-2025-190492 Malicious code in worldskills (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ace818f9e6d4526355bd80129354c139dd0b991e6df6ee6211df41110352 The package worldskills was found to contain malicious code...
Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort. "The packages were systematically published over an extended period, flooding the npm...
EUVD-2025-175385
Malicious code in @walletify/ui npm...
Malicious code in @walletify/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47d10b25587929b2987efd39df23877c3753147c431eb456cef63e175e70588c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...