1941 matches found
EUVD-2025-177007
Malicious code in prompts-capella-node-config-biomimicry npm...
Malicious code in xo-morgan-css-loader-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in centauri-xenobiology-prompts-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1465d9ba39cc1b669215a53dc40fea20e44322f438f590b0c84e02c9abeab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177002
Malicious code in prompts-radiometric-passport-geoarchaeology npm...
EUVD-2025-175624
Malicious code in wavefunction-prompts-webdriver-mocha-vuetify npm...
Malicious code in sass-loader-prompts-inquirer-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510e31e6aebe1ba6798f088e0772983d71667602f005659f7f54fddb9b9facd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185851 Malicious code in blaze-antares-taurus-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad226b864d7c4e73ea785218719e45d19c4ac3acdb0c4d2a3c0530ff2b85350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in blaze-antares-taurus-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad226b864d7c4e73ea785218719e45d19c4ac3acdb0c4d2a3c0530ff2b85350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176203
Malicious code in stop-cressida-prompts-quasar npm...
EUVD-2025-175573
Malicious code in weywot-prompts-nestjs-nuxtjs npm...
EUVD-2025-175467
Malicious code in xo-morgan-css-loader-prompts npm...
EUVD-2025-175515
Malicious code in xanthus-zenobia-entanglement-prompts npm...
EUVD-2025-180467
Malicious code in aldebaran-regulus-bellatrix-prompts npm...
EUVD-2025-179799
Malicious code in chai-prompts-auth0-geckodriver npm...
EUVD-2025-177000
Malicious code in prompts-terser-webpack-plugin-enceladus-graviton npm...
EUVD-2025-175934
Malicious code in titan-luna-luna-prompts npm...
MAL-2025-186051 Malicious code in centauri-lyra-prompts-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b9d80123339b9219c56b928dd260db119229c29a605ff5c389d3b57d4a5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64402 Apache OpenOffice: Remote documents loaded without prompt via OLE objects
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to...
Malicious code in hugo-prompts-install-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...