CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10

CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10. A patched version of the package is available...

EUVD-2025-137901

Malicious code in flights-lutuiog-adifagilo npm...

EUVD-2025-133471

Malicious code in teate-thy-sonic-bupha npm...

EUVD-2025-142808

Malicious code in buta-fs0boiuna-gaif npm...

MAL-2025-171991 Malicious code in walidcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2025-116390

Malicious code in aurora-tailwindcss-nodejs-lynx npm...

EUVD-2025-111856

Malicious code in leda-async-nodejs-izar npm...

EUVD-2025-122418

Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin npm...

EUVD-2025-121811

Malicious code in spectron-docusaurus-nodejs-postgres npm...

EUVD-2025-122273

Malicious code in sails-javascript-nodejs-achernar npm...

Malicious code in phenomic-json-nodejs-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e01dead8d8853b5795ad6a7c6064b9c62e43df2d92bce5cd0c4644461caa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111756

Malicious code in levels-node-config-nodejs-dione npm...

EUVD-2025-111140

Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...

EUVD-2025-112229

Malicious code in javascript-nodejs-lint-staged-build npm...

Malicious code in aether-cygnus-nodejs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-nodejs-magellan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...