143338 matches found
EUVD-2025-199913
Malicious code in eslint-plugin-react-hooks-published npm...
EUVD-2025-199912
Malicious code in chain-selectors npm...
EUVD-2025-199910
Malicious code in vitest-environment-jsdom-patched npm...
EUVD-2025-199908
Malicious code in x402-legacy npm...
Malicious code in x402-legacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...
MAL-2025-191485 Malicious code in x402-legacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...
MAL-2025-191480 Malicious code in accounts-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07acaccf5cae78ad4bfd5f967e15c5ba68180c1350310492a9065ca97124bf26 The package accounts-base was found to contain malicious code. Source: ghsa-malware cf76e57ba69c401756a0d9279f66fcd197667ce73a011c643099737d08dc306c...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...
EUVD-2025-199807
Malicious code in bitcoin-lib-js npm...
MAL-2025-191478 Malicious code in bitcoin-lib-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480dbd7d7ec801a0212ee78ebb73268cd67ba4fb96b06ec563fbafe31aa10531 The package bitcoin-lib-js was found to contain malicious code. Source: ghsa-malware 95f79207062e8c5db317d3487c20f36927b99e9f0b9bfc2551c22a23d10c020f...
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
The second wave of the Shai-Hulud supply chain attack has spilled over to the Maven ecosystem after compromising more than 830 packages in the npm registry. The Socket Research Team said it identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that embeds the same two components...
Malicious code in bitcoin-main-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f6833ddd073b7c036ec32739e3cb826bd1eda9d3c350eed423548f64f047b2 The package bitcoin-main-lib was found to contain malicious code. Source: ghsa-malware 06ed1aa4aa61f36d953368c74cb3daf102b02842a6a27843021b499b033d71...
EUVD-2025-199703
Malicious code in vite-dynachunk npm...
EUVD-2025-199704
Malicious code in chai-jsons npm...
Malicious code in chai-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e842da1fade3683b329217bfdfa620ad7b15d9dbec35065dd295c074b45bfd2 The package chai-auth was found to contain malicious code. Source: ghsa-malware 24555b314815073bff432dc1005d3e9420050160c237c77c47db6297c6837a05 Any...
MAL-2025-191471 Malicious code in ahmed_salem_t (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc278db8d9e1de9bc4e08bdc6bb126ee202e1f3035b69348d6f1ff66dd448e83 The package ahmedsalemt was found to contain malicious code. Source: ghsa-malware 2b2f4d2a3aa2f5b0a62127ad70f27d33c81f4d216a3fd4ff651f855cbb3b7f8e An...
EUVD-2025-199707
Malicious code in ahmedsalemt npm...
MAL-2025-191469 Malicious code in bip40 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376d623eb0ffaacfbc6857b02083c7a1d37460c78579f88ddf63e6850cadc3e1 The package bip40 was found to contain malicious code. Source: ghsa-malware 39978dd4e71a01636f852725943d9488f7e1ba9f71fe9ca6a1f402a6c747fa34 Any...