13834 matches found
EUVD-2025-140216
Malicious code in mibasdah-manassd-msidnsas npm...
EUVD-2025-143037
Malicious code in buis-sunina-mubn npm...
EUVD-2025-138778
Malicious code in poglymer-ogminmh-fajmaga npm...
EUVD-2025-135534
Malicious code in thambi-vers-vesd npm...
EUVD-2025-142988
Malicious code in buta-faag-saigafa npm...
EUVD-2025-139175
Malicious code in nuyar-adar-bid npm...
EUVD-2025-142804
Malicious code in buta-fs0boiuna-gauafiooifa npm...
EUVD-2025-140290
Malicious code in manusidda-nusadsta-manuda npm...
EUVD-2025-139499
Malicious code in nuilva-dadre-ahkaosognfa npm...
EUVD-2025-135286
Malicious code in tray-uozp-eraty npm...
MAL-2025-173649 Malicious code in butanaih-asfi-darufau (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366203ff9d47e87960d279ed61d90f9478bf34a6afc43f270a3615bfd10f477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
DRUPAL-CORE-2025-006
Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data...
Malicious code in hereis-maniac-tanbuykun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8abef596160215e06c90cf354f8630fe8f7addb27a23b09793bc1159db0a319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20270 more potentially affected by unknown CVE via acertea (1.1.6)
acertea NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...
siddheshtea (1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (1.0.0)
@miftaikyy/depentts NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...
@fahmisugeng13/tea_fahmisugeng13 (1.1.4) potentially affected by unknown CVE via tea_fahmisugeng13 (1.1.4)
teafahmisugeng13 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teafahmisugeng13 and may be impacted: - @fahmisugeng13/teafahmisugeng13 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171951...
EUVD-2025-146007
Malicious code in ameennaseem npm...
EUVD-2025-146127
Malicious code in agussurya npm...