Prototype Pollution

@adonisjs/bodyparser is vulnerable to a Prototype Pollution. The vulnerability is due to improper handling of multipart form-data parsing, which allows a remote attacker to manipulate object prototypes at runtime and potentially alter application behavior...

Malicious code in innercore-superposition-lint-staged-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7abd4acbba5b074836858ec5783011c447065694a29b8d590667f5c6cfee9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-child-process-pegasus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176932

Malicious code in publish-adonis-asteroid-acamar npm...

EUVD-2025-176098

Malicious code in supervisor-adonis-epimetheus-rimraf npm...

EUVD-2025-178411

Malicious code in ini-koa-adonis-astrometry npm...

EUVD-2025-179952

Malicious code in build-neptunology-neptunology-adonis npm...

Malicious code in adonis-comet-sedna-geomorphology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337bca060b6e0e2d205280cca27089440473dfbf815ca59cb70305a3995b1f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176197

Malicious code in stratosphere-outercore-carpo-adonis npm...

EUVD-2025-179938

Malicious code in bunyan-carina-adonis-mysql npm...

EUVD-2025-180504

Malicious code in adonis-child-process-pegasus-repository npm...

EUVD-2025-177821

Malicious code in mira-pino-impulse-adonis npm...

EUVD-2025-175587

Malicious code in webpack-exec-adonis-terser-webpack-plugin npm...

EUVD-2025-176296

Malicious code in socketio-polaris-restart-adonis npm...

Malicious code in mira-pino-impulse-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a1147eb997379acf6a6c10728cc952cf4d610b234389989f89effcc5486ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

EUVD-2025-179829

Malicious code in centauri-module-adonis-reveal-md npm...

EUVD-2025-175560

Malicious code in wezen-xerxes-vortex-adonis npm...

EUVD-2025-176770

Malicious code in redis-adonis-quito-io npm...

MAL-2025-185386 Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...