EUVD-2025-178062

Malicious code in lithosphere-buffer-jwt-prettier npm...

EUVD-2025-175454

Malicious code in yaml-cache-sails-jwt npm...

EUVD-2025-178873

Malicious code in forever-cygnus-postcss-jwt npm...

EUVD-2025-176271

Malicious code in spectron-commitizen-server-jwt npm...

MAL-2025-187009 Malicious code in forever-cygnus-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fd6949db8f73f60ad61fd46e85a491a3d296a9479c600d2a79f928c0d66e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-9MJ6-HXHV-W67J jose2go is vulnerable to a JWT bomb attack through its decode function

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service DoS via crafted JSON Web Encryption JWE token with an exceptionally high compression ratio...

EUVD-2025-112025

Malicious code in jwt-test-elektra-sails npm...

EUVD-2025-112030

Malicious code in jwt-publish-hermes-miranda npm...

EUVD-2025-123893

Malicious code in pegasus-forever-jwt-cache npm...

EUVD-2025-115684

Malicious code in carina-resolvers-jwt-xo npm...

EUVD-2025-112021

Malicious code in jwt-wolf-solis-query npm...

EUVD-2025-123321

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin npm...

EUVD-2025-112032

Malicious code in jwt-nebula-module-colors npm...

EUVD-2025-112041

Malicious code in jwt-figures-ora-commitizen npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

EUVD-2025-112038

Malicious code in jwt-gravity-europa-hexo npm...

EUVD-2025-120937

Malicious code in update-chai-non-blocking-jwt npm...

EUVD-2025-121074

Malicious code in typeorm-pipe-dynamo-jwt npm...

EUVD-2025-116533

Malicious code in arcturus-fork-cassini-jwt npm...

EUVD-2025-123873

Malicious code in pegasus-redis-jwt-semantic-ui npm...