EUVD-2025-201147

Malicious code in elf-stats-lanternlit-snowman-834 npm...

EUVD-2025-201150

Malicious code in elf-stats-bright-cocoa-293 npm...

EUVD-2025-201151

Malicious code in beep-types npm...

EUVD-2025-201146

Malicious code in elf-stats-mulled-ornament-810 npm...

MAL-2025-192299 Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview hast-util-to-mdast9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview unified11 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

[SECURITY] Fedora 43 Update: torbrowser-launcher-0.3.9-2.fc43

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your langu age and for your...

EUVD-2025-201139

Malicious code in elf-stats-festive-sparkler-275 npm...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

EUVD-2025-201133

Malicious code in tailwindcss-animation-css npm...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

MAL-2025-192290 Malicious code in dotenv-intend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...

EUVD-2025-201136

Malicious code in chai-test-await npm...

EUVD-2025-201110

Malicious code in self-service-portal-prod npm...

MAL-2025-192288 Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

Shai Hulud 2.0, now with a wiper flavor

In September, a new breed of malware distributed via compromised Node Package Manager npm packages made headlines. It was dubbed "Shai-Hulud", and we published an in-depth analysis of it in another post. Recently, a new version was discovered. Shai Hulud 2.0 is a type of two-stage worm-like malwa...

EUVD-2025-201118

Malicious code in elf-stats-frostbitten-pantry-235 npm...

EUVD-2025-201119

Malicious code in elf-stats-candystriped-chimney-879 npm...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...