4737 matches found
MAL-2025-171991 Malicious code in walidcroissant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-123659
Malicious code in pipe-dynamo-nodejs-stream npm...
EUVD-2025-124483
Malicious code in nightmare-indus-nodejs-xenos npm...
EUVD-2025-121001
Malicious code in umbra-nodejs-nestjs-node-config npm...
EUVD-2025-124353
Malicious code in nodejs-io-jwt-global npm...
EUVD-2025-124344
Malicious code in nodejs-relay-rest-deneb npm...
EUVD-2025-122211
Malicious code in scorpius-nodejs-sagitta-cz-conventional-changelog npm...
EUVD-2025-116390
Malicious code in aurora-tailwindcss-nodejs-lynx npm...
EUVD-2025-122273
Malicious code in sails-javascript-nodejs-achernar npm...
EUVD-2025-123389
Malicious code in private-halley-nodejs-subscription npm...
EUVD-2025-123314
Malicious code in procyon-nodejs-link-metalsmith npm...
Malicious code in nodejs-framework-taurus-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124227
Malicious code in nuxtjs-apollo-gulp-nodejs npm...
EUVD-2025-124662
Malicious code in mysql-nodejs-callisto-framework npm...
EUVD-2025-120278
Malicious code in xenon-nodejs-tethys-husky npm...
Malicious code in equinox-nodejs-csrf-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975315d4e177db7a394dfd05890d08f20a080994d0091cfe03b455a5044775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124354
Malicious code in nodejs-hydra-jest-quito npm...
Malicious code in convict-query-nodejs-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...