EUVD-2025-52214

Malicious code in rude-tan-wolf npm...

Malicious code in direct-rose-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116832e7747d6637d84e2be364e075e4b9f25a332e8a84bae80c27642108c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51776

Malicious code in strategic-purple-wolf npm...

EUVD-2025-52025

Malicious code in silky-sapphire-wolf npm...

EUVD-2025-53142

Malicious code in musical-blue-wolf npm...

EUVD-2025-52835

Malicious code in parental-apricot-wolf npm...

EUVD-2025-55104

Malicious code in critical-blush-wolf npm...

EUVD-2025-54883

Malicious code in direct-rose-wolf npm...

EUVD-2025-54617

Malicious code in encouraging-maroon-wolf npm...

EUVD-2025-52804

Malicious code in patient-brown-wolf npm...

Malicious code in strategic-purple-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d9cb1c80409ece0c1d403cc232d8aa2914f4434243f3204ace25798701b4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53696

Malicious code in interesting-magenta-wolf npm...

EUVD-2025-52815

Malicious code in passing-peach-wolf npm...

EUVD-2025-53792

Malicious code in incredible-aqua-wolf npm...

Malicious code in critical-blush-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a13ad753443f5a21600eac32db0d01a95eeea8646f62329f13202eb3b4f455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54707

Malicious code in educational-white-wolf npm...

EUVD-2025-50416

Malicious code in deliberatewolfz3n npm...

Malicious code in opposite_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f058966146eee432b7a7c84c1385f6962146cd9a02dc8f922eb57c466e8cf156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49097

Malicious code in varyingwolfz3n npm...

CVE-2025-10966 missing SFTP host verification with wolfSSH

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...