5830 matches found
MAL-2025-186716 Malicious code in element-ui-nodejs-bellatrix-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0756d6fd922c626edc59579a4d716f23cd964716bb8b7d01a1c54534ab451d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179840
Malicious code in celeste-baryon-stop-nodejs npm...
EUVD-2025-180431
Malicious code in andromeda-webpack-nodejs-sadr npm...
EUVD-2025-178130
Malicious code in less-geckodriver-mongodb-nodejs npm...
EUVD-2025-180518
Malicious code in acamar-child-process-oauth-nodejs npm...
EUVD-2025-178940
Malicious code in farout-quark-joviology-nodejs npm...
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10. A patched version of the package is available...
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...
MAL-2025-171991 Malicious code in walidcroissant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-123314
Malicious code in procyon-nodejs-link-metalsmith npm...
EUVD-2025-116050
Malicious code in blitz-nodejs-postcss-umbra npm...
MAL-2025-141247 Malicious code in cressida-vuepress-nconf-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3fad2a7701e8e70e72d43cee4ad37b3a44e2bbbc521f2696eaf92805c68b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111756
Malicious code in levels-node-config-nodejs-dione npm...
EUVD-2025-111524
Malicious code in lynx-dotenv-safe-nodejs-json npm...
EUVD-2025-111404
Malicious code in markdown-pdf-xerxes-eslint-config-nodejs npm...