EUVD-2025-179408

Malicious code in dagda-pulsar-redshift-remark npm...

Malicious code in redshift-deimos-neptune-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f964324bd6752b8565f81793c10d0ab91313d89d5665605b85485952a2a4c694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176761

Malicious code in redshift-nebula-cz-conventional-changelog-fornax npm...

EUVD-2025-177523

Malicious code in nova-singularitarianism-warp-redshift npm...

EUVD-2025-176288

Malicious code in solarnebula-testcafe-redshift-isostasy npm...

MAL-2025-189587 Malicious code in solarnebula-testcafe-redshift-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a15c52af2d5e39295813eaff4bd1238055cd3382c46f9dbad1c88557512906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175838

Malicious code in umbra-farout-barnard-redshift npm...

Malicious code in redshift-run-script-chai-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5286f36483bbe7228cd4a81c89c18519248a77be151e2d05f127fcabe320b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178189

Malicious code in kinetic-ora-bootstrap-redshift npm...

EUVD-2025-176895

Malicious code in puppeteer-geckodriver-redshift-eslint-config npm...

EUVD-2025-176762

Malicious code in redshift-deimos-neptune-yakutsk npm...

EUVD-2023-32301

Malicious code in bioql PyPI...

EUVD-2024-1847

Malicious code in bioql PyPI...

EUVD-2024-3568

Malicious code in bioql PyPI...

EUVD-2024-51083

Malicious code in bioql PyPI...

EUVD-2025-28464

Malicious code in bioql PyPI...

EUVD-2022-34278

Malicious code in bioql PyPI...

EUVD-2024-3567

Malicious code in bioql PyPI...

EUVD-2025-19715

Malicious code in bioql PyPI...

CVE-2025-58748: Deserialization of Untrusted Data

Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation H2.java does not verify that a provided JDBC URL starts with jdbc:h2. This lack of validation allows a crafted JDBC configuration that substitutes the Amazon...