2196 matches found
EUVD-2025-177430
Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry npm...
EUVD-2025-177109
Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo npm...
EUVD-2025-179328
Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby npm...
EUVD-2025-175628
Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...
EUVD-2025-177945
Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino npm...
EUVD-2025-179393
Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...
EUVD-2025-177952
Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-178299
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...
EUVD-2025-177041
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin npm...
SUSE CVE-2025-64486
calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...
CVE-2025-64486
A vulnerability has been identified in Calibre. It does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve arbitrary code executi...
EUVD-2025-124064
Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...
EUVD-2025-124048
Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin npm...
EUVD-2025-124057
Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius npm...
Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124052
Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax npm...