253 matches found
Malicious code in aps-simple-viewer-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...
AZL-70610 CVE-2025-13226 affecting package nodejs for versions less than 24.14.1-3
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-177556
Malicious code in nodejs-hyperion-quito-start npm...
EUVD-2025-177370
Malicious code in paleoclimatology-jsonp-troposphere-nodejs npm...
EUVD-2025-178115
Malicious code in levels-event-bionics-nodejs npm...
EUVD-2025-178405
Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...
EUVD-2025-178236
Malicious code in jwt-jwt-nodejs-publish npm...
EUVD-2025-177634
Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism npm...
EUVD-2025-177558
Malicious code in nodejs-cosmicweb-chakra-ui-vortex npm...
Malicious code in cache-norma-protractor-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e22a028f41addc99f22b1226c3465d0e27a43c7438538f39b0d1e19d26e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...
EUVD-2025-111756
Malicious code in levels-node-config-nodejs-dione npm...
EUVD-2025-122273
Malicious code in sails-javascript-nodejs-achernar npm...
EUVD-2025-111831
Malicious code in leda-nodejs-nextjs-sirius npm...
EUVD-2025-124362
Malicious code in nodejs-csrf-dotenv-safe-solis npm...
EUVD-2025-116546
Malicious code in aquarius-venus-nodejs-soap npm...
EUVD-2025-123659
Malicious code in pipe-dynamo-nodejs-stream npm...
Malicious code in nodejs-framework-taurus-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...