166 matches found
BIT-NGINX-GATEWAY-2021-3618
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...
EUVD-2025-117161
Malicious code in private-violet-alpaca npm...
EUVD-2025-103395
Malicious code in obedientalpacaz3n npm...
EUVD-2025-104082
Malicious code in littlealpacaz3n npm...
EUVD-2025-95088
Malicious code in silkyalpacaz3n npm...
EUVD-2025-106346
Malicious code in boredalpacaz3n npm...
EUVD-2025-106244
Malicious code in changingalpacaz3n npm...
Malicious code in identical_alpaca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f95f5a55a303acf898b70ba3061882d632019e27c143439902615b2979551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74232
Malicious code in smoggyalpacateal-48 npm...
EUVD-2025-76874
Malicious code in fatalalpaca-gooddev npm...
EUVD-2025-76722
Malicious code in greatalpaca-silentdev npm...
EUVD-2025-75606
Malicious code in smartalpaca-appteadev npm...
MAL-2025-108857 Malicious code in smart_alpaca-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76572
Malicious code in independentalpaca-appteadev npm...
EUVD-2025-75624
Malicious code in slightalpaca-biggestdev npm...
EUVD-2025-75514
Malicious code in successivealpaca-notthedev npm...
EUVD-2025-77542
Malicious code in productivealpacaaquamarine-22 npm...
MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100867 Malicious code in conservative_alpaca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e587d82e290763eced0dd0761cf9e2927a8b493b188e56f332d344468c0f2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...