4784 matches found
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...
MAL-2025-171991 Malicious code in walidcroissant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-124344
Malicious code in nodejs-relay-rest-deneb npm...
EUVD-2025-116390
Malicious code in aurora-tailwindcss-nodejs-lynx npm...
EUVD-2025-124353
Malicious code in nodejs-io-jwt-global npm...
EUVD-2025-122211
Malicious code in scorpius-nodejs-sagitta-cz-conventional-changelog npm...
EUVD-2025-120634
Malicious code in wasat-mui-sadr-nodejs npm...
EUVD-2025-112229
Malicious code in javascript-nodejs-lint-staged-build npm...
Malicious code in zenith-polaris-warp-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ce5d07c12870a3c118a4ad89de58f1274582f8f89ea161afda22f2f8f4faee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123314
Malicious code in procyon-nodejs-link-metalsmith npm...
Malicious code in convict-query-nodejs-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115023
Malicious code in convict-query-nodejs-prettier npm...
EUVD-2025-124662
Malicious code in mysql-nodejs-callisto-framework npm...
EUVD-2025-121001
Malicious code in umbra-nodejs-nestjs-node-config npm...
Malicious code in quark-pipe-mocha-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...