17471 matches found
EUVD-2025-145537
Malicious code in gracesmith npm...
@abbeey/beypremajg (>=1.1.4, <=1.1.5) potentially affected by unknown CVE via beypremajg (1.1.4)
beypremajg NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on beypremajg and may be impacted: - @abbeey/beypremajg =1.1.4, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170969...
EUVD-2025-145269
Malicious code in maqsoodabdul npm...
@abbeey/beypremtea (1.0.0), beypremtea (1.0.0) potentially affected by unknown CVE via beypremtea (1.1.5)
beypremtea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on beypremtea and may be impacted: - @abbeey/beypremtea 1.0.0 - beypremtea 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170970...
siddheshtea (1.1.6) potentially affected by unknown CVE via aji-15 (1.0.0)
aji-15 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-15 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152053...
siddheshtea (1.1.6) potentially affected by unknown CVE via manda-26 (1.0.0)
manda-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159622...
siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-nahahgsa (1.0.0)
nudela-rahfeg-nahahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-nahahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163841...
siddheshtea (1.1.6) potentially affected by unknown CVE via maka-ani-gunalia (1.0.0)
maka-ani-gunalia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on maka-ani-gunalia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159144...
EUVD-2025-143880
Malicious code in nabuf-otin-agogas npm...
EUVD-2025-148408
Malicious code in tealove-nameka22 npm...
EUVD-2025-150136
Malicious code in tadashi-tsssu-tresud npm...
EUVD-2025-149702
Malicious code in teagood-manaki44 npm...
EUVD-2025-143988
Malicious code in nabuf-otgaf-doigoafo npm...
Malicious code in verify-aysali-aisi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6459c52d691ee22a51528138f617ac9aa3c4ab69eb176e1d1d6e2cae314f0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-150015
Malicious code in teagood-cuekin32 npm...
siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala28 (1.0.0)
nokire-nakala28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162980...
siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala7 (1.0.0)
nokire-nakala7 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala7 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163025...
EUVD-2025-149611
Malicious code in teagood-nakama37 npm...