151 matches found
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...
MAL-2026-3399 Malicious code in money-badger-open-rpc-test-bugbount (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in money-badger-open-rpc-test-bugbount (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in money-badger-open-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-3353 Malicious code in money-badger-open-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-102143
Malicious code in slowbadgerz3n npm...
EUVD-2025-102134
Malicious code in solebadgerz3n npm...
EUVD-2025-102088
Malicious code in stablebadgerz3n npm...
EUVD-2025-101860
Malicious code in thoughtlessbadgerz3n npm...
Malicious code in stable_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73330b901f9f071b56af1c93cf538fd1fe8b6edc5476db0781648efe8e76e7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100231
Malicious code in conventionalbadgerz3n npm...
Malicious code in sparkling_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb106169e5a9ee05da355d6958b8f2b7f5122c1d02d389b68bbbee8f1a6c832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-122509 Malicious code in philosophical_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c37c85771c226cdaaf44cca0dc86081824795e79d49a07d8ec925f940686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92633
Malicious code in curlybadgerz3n npm...
MAL-2025-113251 Malicious code in curly_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50ce55ac0c25beb451a1a1cff6e19d0127f88c1c06195b6eed058c4675c8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-87583
Malicious code in yawningbadgerz3n npm...