AZL-70610 CVE-2025-13226 affecting package nodejs 20.14.0-13

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2025-177370

Malicious code in paleoclimatology-jsonp-troposphere-nodejs npm...

EUVD-2025-178236

Malicious code in jwt-jwt-nodejs-publish npm...

EUVD-2025-178115

Malicious code in levels-event-bionics-nodejs npm...

EUVD-2025-177556

Malicious code in nodejs-hyperion-quito-start npm...

EUVD-2025-178405

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...

EUVD-2025-177634

Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism npm...

EUVD-2025-177558

Malicious code in nodejs-cosmicweb-chakra-ui-vortex npm...

Malicious code in cache-norma-protractor-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e22a028f41addc99f22b1226c3465d0e27a43c7438538f39b0d1e19d26e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137901

Malicious code in flights-lutuiog-adifagilo npm...

EUVD-2025-133471

Malicious code in teate-thy-sonic-bupha npm...

EUVD-2025-142808

Malicious code in buta-fs0boiuna-gaif npm...

EUVD-2025-111756

Malicious code in levels-node-config-nodejs-dione npm...

EUVD-2025-124362

Malicious code in nodejs-csrf-dotenv-safe-solis npm...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-framework-taurus-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

EUVD-2025-122273

Malicious code in sails-javascript-nodejs-achernar npm...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...