EUVD-2025-175454

Malicious code in yaml-cache-sails-jwt npm...

EUVD-2025-176482

Malicious code in scripts-yaml-janus-gacrux npm...

EUVD-2025-179880

Malicious code in capella-yaml-innercore-hermes npm...

EUVD-2025-176062

Malicious code in tardigrade-virgo-hologram-yaml npm...

EUVD-2025-175452

Malicious code in yaml-entanglement-radiant-geodynamo npm...

EUVD-2025-175453

Malicious code in yaml-chi-cloud-nu-code npm...

EUVD-2025-176861

Malicious code in quantumfoam-zenobia-reveal-md-yaml npm...

EUVD-2025-175449

Malicious code in yaml-kappa-integer-uglify-serialize npm...

EUVD-2025-177972

Malicious code in magnetar-paleoecology-tectonic-yaml npm...

EUVD-2025-178902

Malicious code in final-scale-static-yaml-debug npm...

MAL-2025-190013 Malicious code in try-stub-yaml-query-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7afc6d4f0fe68228645490da6a101c05503ade1edbaa923ccc4560f7632b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176577

Malicious code in runtime-short-fork-yaml-pipe npm...

EUVD-2025-176661

Malicious code in rest-oortcloud-interstellarmedium-yaml npm...

EUVD-2025-179178

Malicious code in electron-postcss-loader-yaml-pyxis npm...

EUVD-2025-175446

Malicious code in yaml-root-xml-process-proxy npm...

MAL-2025-186002 Malicious code in capella-yaml-innercore-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372f99cb9ed94cef8bc325e39ea217a894b8578a523b5ea09806bdeb8df4ca2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189214 Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490d6f037ba5aba42fdaf960b0d8bbe6e55f94782153789b5b8d489e6eca4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

JS-YAML 安全漏洞

JS-YAML is a JavaScript YAML parser and dump from Nodeca Open Source. A security vulnerability exists in JS-YAML version 4.1.0 and earlier, which stems from the possibility of modifying prototypes when parsing YAML documents, potentially leading to prototype contamination...

Mageia: Security Advisory (MGASA-2025-0275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-46851

Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 4.1.1 Description js-yaml is a JavaScript YAML parser and dumper. A flaw exists where an attacker can alter the prototype of a parsed YAML document, leading to prototype pollution. This impacts users parsing untrusted...