EUVD-2025-115684

Malicious code in carina-resolvers-jwt-xo npm...

EUVD-2025-122594

Malicious code in resolvers-json-spectron-enif npm...

EUVD-2025-120240

Malicious code in xenos-thuban-resolvers-native npm...

EUVD-2025-120295

Malicious code in xanthus-restart-publish-resolvers npm...

Malicious code in passport-aquarius-gatsby-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f7caf8a764d4cad9a6e52fc2cebc2a311fc345c6b09ec76afbf8e219e568a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120089

Malicious code in yonder-resolvers-xml-uninstall npm...

EUVD-2025-115172

Malicious code in commitizen-neptune-proxima-resolvers npm...

Malicious code in resolvers-meteor-nodemon-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0936c12248fcd3921a0aacc79011e7a024186908318bf5dc11c50e41e415e551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114677

Malicious code in cz-conventional-changelog-request-axios-resolvers npm...

Malicious code in node-config-warp-resolvers-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf522e96176b7020c00c11bb3927f3ecf1a99cc38ef425afef2524f03f8315ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124141

Malicious code in octans-resolvers-inquirer-hydra npm...

Malicious code in yonder-resolvers-xml-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998246d583d234c05dbda2d020476c69c2170bdc801daeb0155d6fb4b69d2387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114625

Malicious code in dagda-resolvers-express-foundation npm...

EUVD-2025-124864

Malicious code in miranda-resolvers-pyxis-iota npm...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

bind: Resource exhaustion via malformed DNSKEY handling

A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentiall...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

Resource Injection

Overview @evershop/evershop is a The React Ecommerce platform. Built with React and Postgres. Open-source and free. Fast and customizable. Affected versions of this package are vulnerable to Resource Injection via the use of getOrdersBaseQuery in Order.resolvers.js. An attacker can access...

EverShop 安全漏洞

EverShop is a NodeJS e-commerce platform open-sourced by EverShop. A security vulnerability exists in EverShop 2.0.1 and earlier versions, which stems from improper control of the resource identifier of the parameter uuid in the file /src/modules/oms/graphql/types/Order/Order.resolvers.js, which...