EUVD-2025-136897

Malicious code in sahnim-sati-aa npm...

MAL-2025-178392 Malicious code in sahnim-sati-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892476635ea943b5e6907bf6df9d4c0a507668bdb7e7fa659e4dc4cb7957fdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160282 Malicious code in messi-aa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea49bb468710a43ee3c59ac041576feca7a9bd7b5c6029a0dfb33be1138d6b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143935

Malicious code in nabuf-otimmn-aa npm...

Malicious code in messi-aa-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75231ed32b957af26a1d5ddd99dbfdfdd0b821cb9321db6960faa8f26ec7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565fb5ee361f014188d494b87a118acd0eec659b153bd5e0b0326edd35494bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aa-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec4397e62fe75f61f8c27c64a0ad451b93b8b525ee23e19a000755b7eb55fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fabae9ca47f618c8d07d277b3b84fb48e6e5b54fdc0d4269543bbca9c6f9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1466 more potentially affected by CVE-2025-64459 via django (>=5.2.0 <=5.2.7)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...

01os (>=0.0.1 <=0.0.14), 12factor-configclasses (>=0.2.1 <=0.2.6) +4434 more potentially affected by CVE-2025-62727 via starlette (>=0.10.1 <=0.49.0)

starlette PYPI version =0.10.1, =0.0.1, =0.2.1, =0.1.0, =0.3.6, =0.12.0, =0.4.2, =0.1.10, =0.0.1, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.1.9 and more Source cves: CVE-2025-62727 Source advisory: SNYK:PYTHON-STARLETTE-13733964...

CVE-2025-53297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through = 1.2.1...

EUVD-2025-35467

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through = 1.2.1...

CVE-2025-53297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through = 1.2.1...

EUVD-2011-1033

Malware in sbrugna...

EUVD-2024-45853

Malicious code in bioql PyPI...

EUVD-2022-55343

Malicious code in bioql PyPI...

EUVD-2024-31285

Malicious code in bioql PyPI...

EUVD-2024-31282

Malicious code in bioql PyPI...

EUVD-2024-31281

Malicious code in bioql PyPI...

EUVD-2022-32129

Malicious code in bioql PyPI...