ai-box-lib (>=0.1.0 <=0.1.9), aligned-py (>=0.1.0 <=0.2.0a0) +97 more potentially affected by CVE-2025-68131 via cbor2 (>=4.1.2 <=5.7.1)

cbor2 PYPI version =4.1.2, =0.1.0, =0.1.0, =0.7.0, =0.13.0, =0.0.1, =0.5.5.post5, =0.5.5.post4, =0.1.1, =0.1.0, =0.2.0, =0.10.6, =0.7.1a0, =1.0.7 and more Source cves: CVE-2025-68131 Source advisory: OSV:PYSEC-2025-90...

EUVD-2025-176797

Malicious code in rate-limiter-achernar-hydrogeology-antimatter npm...

EUVD-2025-177687

Malicious code in nconf-zenobia-antimatter-changelog npm...

EUVD-2025-179881

Malicious code in capella-tethys-lynx-antimatter npm...

EUVD-2025-180169

Malicious code in axios-envconfig-antimatter-xenos npm...

EUVD-2025-176969

Malicious code in proxima-antimatter-express-redis npm...

EUVD-2025-179677

Malicious code in colors-nightwatch-antimatter-postcss-loader npm...

EUVD-2025-176447

Malicious code in selenium-avior-antimatter-registry npm...

EUVD-2025-178135

Malicious code in less-antimatter-slides-phoebe npm...

EUVD-2025-178059

Malicious code in lithosphere-inflation-antimatter-europa npm...

EUVD-2025-177929

Malicious code in mdx-hyperion-taurus-antimatter npm...

MAL-2025-185483 Malicious code in antimatter-pino-celeste-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a5895f5f1d0a71796143beede20c157aef5750e7406148490cd3ebc7a3ae97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189428 Malicious code in selenium-avior-antimatter-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42db6c042c566e179df6a1d7dedd3a0cf140b367c1acfd4d03ed2f557fe89d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180406

Malicious code in antimatter-exoplanetology-convict-update npm...

EUVD-2025-175600

Malicious code in webdriver-mocha-tectonic-leda-antimatter npm...

EUVD-2025-180404

Malicious code in antimatter-slidev-install-void npm...

Malicious code in antimatter-pino-celeste-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a5895f5f1d0a71796143beede20c157aef5750e7406148490cd3ebc7a3ae97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177918

Malicious code in mechatronics-xenos-fomalhaut-antimatter npm...

EUVD-2025-175584

Malicious code in webpack-query-thermochronology-antimatter npm...

EUVD-2025-180405

Malicious code in antimatter-pino-celeste-dynamo npm...