4775 matches found
Malicious code in despina-photon-nodejs-on (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3152b5d159e60035f53ed829f5362c99844bd6585f8e614ae1b496a79ee78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176136
Malicious code in superagent-nodejs-darkenergy-fermiparadox npm...
MAL-2025-188329 Malicious code in nodejs-sass-loader-carina-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ff8f4ea5bf2c844ec1c897f02f47338bcfb40fdbe2cf01b0b824f0c1c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180383
Malicious code in apollo-nodejs-helmet-loglevel npm...
EUVD-2025-179166
Malicious code in element-ui-nodejs-bellatrix-hapi npm...
EUVD-2025-180518
Malicious code in acamar-child-process-oauth-nodejs npm...
Malicious code in cache-norma-protractor-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e22a028f41addc99f22b1226c3465d0e27a43c7438538f39b0d1e19d26e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177552
Malicious code in nodejs-sublimation-blueshift-ganymede npm...
Malicious code in nodejs-csrf-sagitta-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186716 Malicious code in element-ui-nodejs-bellatrix-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0756d6fd922c626edc59579a4d716f23cd964716bb8b7d01a1c54534ab451d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10. A patched version of the package is available...
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...
MAL-2025-171991 Malicious code in walidcroissant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-124227
Malicious code in nuxtjs-apollo-gulp-nodejs npm...
EUVD-2025-124662
Malicious code in mysql-nodejs-callisto-framework npm...
Malicious code in equinox-nodejs-csrf-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975315d4e177db7a394dfd05890d08f20a080994d0091cfe03b455a5044775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...