273 matches found
Prototype Pollution
@adonisjs/bodyparser is vulnerable to a Prototype Pollution. The vulnerability is due to improper handling of multipart form-data parsing, which allows a remote attacker to manipulate object prototypes at runtime and potentially alter application behavior...
Malicious code in sails-dotenv-adonis-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa31083ce72f58be06ef61827800200ffc7fb0df078a978047d564620b116b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178411
Malicious code in ini-koa-adonis-astrometry npm...
Malicious code in adonis-child-process-pegasus-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177332
Malicious code in panspermia-winston-phoebe-adonis npm...
EUVD-2025-177821
Malicious code in mira-pino-impulse-adonis npm...
EUVD-2025-180500
Malicious code in adonis-tectonophysics-tectonic-helmet npm...
Malicious code in gemini-query-adonis-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88dc675516f0b833eb0fe5dc36d4860582128956738b97d038115774134b5bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180502
Malicious code in adonis-cosmos-eslint-plugin-izar npm...
EUVD-2025-180230
Malicious code in australis-geomorphology-adonis-babel npm...
EUVD-2025-177023
Malicious code in promise-algol-cosmicsilence-adonis npm...
Malicious code in airbnb-titan-pavo-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175587
Malicious code in webpack-exec-adonis-terser-webpack-plugin npm...
EUVD-2025-176098
Malicious code in supervisor-adonis-epimetheus-rimraf npm...
MAL-2025-188651 Malicious code in phenomic-gemini-adonis-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e473e63486e2e3fb28b1c74b916ee10e38ac8e36cf418dc8213946bf8a4a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187471 Malicious code in ini-koa-adonis-astrometry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814dda9fc098a95449685bf70ed597eaf7718a69688a6739317f7af0058ac94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178739
Malicious code in gemini-query-adonis-request npm...
EUVD-2025-180504
Malicious code in adonis-child-process-pegasus-repository npm...