780 matches found
MAL-2025-148498 Malicious code in telesto-pulsar-postcss-loader-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116764
Malicious code in alphard-pulsar-umbriel-chakra-ui npm...
MAL-2025-140017 Malicious code in blaze-antd-halley-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ada04165f0bab6357a0605b4d95fc185956c1bc0b8618cb7d3f6aa78bd3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146834 Malicious code in pulsar-iota-fork-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141551 Malicious code in deneb-neptune-pulsar-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
This Week in Spring - November 4th, 2025
Hi, Spring fans! Welcome to another all-out installment of This Week in Spring wherein we attempt to recap all that's new and novel in the wild, wacky, and wonderful world of Springdom. And this week, I'm doing so from an airport in Switzerland, en route to Malmo, Sweden, for the amazing Oredev...
GHSA-45P5-V273-3QQR vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator...
CVE-2025-11965 vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator...
CVE-2025-11966 vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator...
GHSA-H5FG-JPGR-RV9C vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator...
GHSA-45P5-V273-3QQR vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator, keycloak-fips...
CVE-2025-11966 vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator, keycloak-fips...
GHSA-H5FG-JPGR-RV9C vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator, keycloak-fips...
CVE-2025-11965 vulnerabilities
Vulnerabilities for packages: keycloak, strimzi-kafka-operator, keycloak-fips...
EUVD-2020-9461
Malware in sbrugna...