5517 matches found
EUVD-2025-176136
Malicious code in superagent-nodejs-darkenergy-fermiparadox npm...
EUVD-2025-178236
Malicious code in jwt-jwt-nodejs-publish npm...
EUVD-2025-178130
Malicious code in less-geckodriver-mongodb-nodejs npm...
EUVD-2025-179234
Malicious code in duplex-parcel-nodejs-membrane npm...
EUVD-2025-177558
Malicious code in nodejs-cosmicweb-chakra-ui-vortex npm...
Malicious code in despina-photon-nodejs-on (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3152b5d159e60035f53ed829f5362c99844bd6585f8e614ae1b496a79ee78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177556
Malicious code in nodejs-hyperion-quito-start npm...
MAL-2025-188326 Malicious code in nodejs-hyperion-quito-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe47afcc4eb84693e5a1585a83da52d5bc58a56d4e82fc172e560abdd48700b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in acamar-child-process-oauth-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf9405e1356b230c3b5e02f074df3b4d1c15deed220a1ee0fa696389b7d321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10
CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10. A patched version of the package is available...
EUVD-2025-137901
Malicious code in flights-lutuiog-adifagilo npm...
EUVD-2025-133471
Malicious code in teate-thy-sonic-bupha npm...
EUVD-2025-142808
Malicious code in buta-fs0boiuna-gaif npm...
MAL-2025-171991 Malicious code in walidcroissant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197384360f80de5c6b9028b5ea2a025db1f27c49811cf6b23300bd4edc3ee9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
AZL-76323 CVE-2025-13042 affecting package nodejs24 24.13.0-3
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-121001
Malicious code in umbra-nodejs-nestjs-node-config npm...
EUVD-2025-122945
Malicious code in query-scorpius-meissa-nodejs npm...
EUVD-2025-122273
Malicious code in sails-javascript-nodejs-achernar npm...