EUVD-2025-121596

Malicious code in stream-run-script-got-morgan npm...

EUVD-2025-111251

Malicious code in mensa-run-script-got-lyra npm...

EUVD-2025-115110

Malicious code in commitlint-zenobia-run-script-superagent npm...

EUVD-2025-115792

Malicious code in callback-run-script-html-webpack-plugin-server npm...

EUVD-2025-123931

Malicious code in pavo-antares-run-script-lyra npm...

EUVD-2025-122381

Malicious code in run-script-charon-rigel-koa npm...

EUVD-2025-114043

Malicious code in enif-xanthus-spinner-run-script npm...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2012-4054

Malware in sbrugna...

Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

Malicious code in run-script-ganymede-npm-miranda (npm)

The package run-script-ganymede-npm-miranda was found to contain malicious code...

MAL-2025-45935 Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-50636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMOL 2.5.0 contains a vulnerability in its Run Script function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can...

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because yaml.load from PyYAML is used in tests/run.py, allowing attackers to execute arbitrary code via a crafted YAML configuration file...

Malicious code in run-script-meissa-charon-sedna (npm)

The package run-script-meissa-charon-sedna was found to contain malicious code...

Malicious code in extremophile-venus-neptune-run-script (npm)

The package extremophile-venus-neptune-run-script was found to contain malicious code...

Malicious code in nightwatch-nodejs-run-script-castor (npm)

The package nightwatch-nodejs-run-script-castor was found to contain malicious code...