Malicious code in run-script-nconf-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122384

Malicious code in run-script-await-ini-ariel npm...

EUVD-2025-120242

Malicious code in xenos-run-script-weywot-exec npm...

EUVD-2025-116099

Malicious code in betelgeuse-run-script-remark-halley npm...

EUVD-2025-111982

Malicious code in kastra-run-script-firebase-blaze npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-121596

Malicious code in stream-run-script-got-morgan npm...

Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113516

Malicious code in fork-run-script-json-bootstrap npm...

EUVD-2012-4054

Malware in sbrugna...

Malicious code in run-script-ganymede-npm-miranda (npm)

The package run-script-ganymede-npm-miranda was found to contain malicious code...

Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

MAL-2025-45935 Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-50636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMOL 2.5.0 contains a vulnerability in its Run Script function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can...

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because yaml.load from PyYAML is used in tests/run.py, allowing attackers to execute arbitrary code via a crafted YAML configuration file...

Malicious code in deneb-ichnology-run-script-yonder (npm)

The package deneb-ichnology-run-script-yonder was found to contain malicious code...

Malicious code in octans-run-script-cors-start (npm)

The package octans-run-script-cors-start was found to contain malicious code...

MAL-2025-34750 Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

MAL-2025-27524 Malicious code in nightwatch-nodejs-run-script-castor (npm)

The package nightwatch-nodejs-run-script-castor was found to contain malicious code...

MAL-2025-18283 Malicious code in deneb-ichnology-run-script-yonder (npm)

The package deneb-ichnology-run-script-yonder was found to contain malicious code...