13835 matches found
Malicious code in chromedriver-aldebaran-helmet-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f900c6a3ea209cd194b0027126b48e7dc7db16c34e75b57b0de4572dcec45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144369 Malicious code in library-apollo-sagitta-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142766 Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114901
Malicious code in cosmos-jsonp-sequelize-cosmos npm...
Malicious code in eslint-config-carpo-wezen-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474671efbafae254395087536634a0fa2478a1859827adcc686b4a54f49d2c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111903
Malicious code in koa-xml-chariklo-perseus npm...
MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116497
Malicious code in astro-geckodriver-janus-helios npm...
EUVD-2025-114946
Malicious code in corvus-perseus-chariklo-dotenv npm...
EUVD-2025-116715
Malicious code in andromeda-xenos-relay-npm npm...
EUVD-2025-112349
Malicious code in izar-subscription-bootes-kinetic npm...
EUVD-2025-112390
Malicious code in iota-farout-aquarius-andromeda npm...
EUVD-2025-117415
Malicious code in empirical-amaranth-scorpion npm...
EUVD-2025-117235
Malicious code in mechanical-amber-panther npm...
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data...
One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts
Smart contracts have significantly advanced blockchain technology, and digital signatures are crucial for reliable verification of contract authority. Through signature verification, smart contracts can ensure that signers possess the required permissions, thus enhancing security and scalability...
Malicious code in cindy-rojak87-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee8cb711e42f948d2471a094a1014d93f2fda4f523e1e2197e5878ea539f4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...