13860 matches found
EUVD-2025-70023
Malicious code in hanafi-semur56-ruro npm...
EUVD-2025-83337
Malicious code in yanti-kripik62-ruro npm...
EUVD-2025-69110
Malicious code in maman-lumpur4-ruro npm...
EUVD-2025-71666
Malicious code in associatedwoodpeckerz3n npm...
MAL-2025-98782 Malicious code in leading_fish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafd010fb6f42eae3ce5fa34e028f6a9e0f3286c7e5f9a947e0bd9f99d2b9134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
@kellyman17/kellymanteasproject (1.1.1), ahahscroot (1.0.1) +42 more potentially affected by unknown CVE via teadungdang (1.1.6)
teadungdang NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teadungdang and may be impacted: - @kellyman17/kellymanteasproject 1.1.1 - ahahscroot 1.0.1 - awio 1.0.8 - bacoritul 1.0.1 - basuki 1.0.0 - bilibili-teapod 1.10.0 -...
@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)
kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...
EUVD-2025-72673
Malicious code in bayu-teh94-pore npm...
dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)
dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...
12boowjljk-notthedevs (1.6.9), ahahscroot (1.0.1) +14 more potentially affected by unknown CVE via 666-tea (1.1.4)
666-tea NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs 1.6.9 - ahahscroot 1.0.1 - bacoritul 1.0.1 - basuki 1.0.0 - df6fqftol9-notthedevs 1.6.9 - forilcuy 1.0.1 - gasmbut 1.0.1 -...
Malicious code in realistic_finch_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93725908ba4bb58b25bd88e18f1d67bf94cddcf75dfe3f8f148533de92e13bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-62523
Malicious code in priorduckz3n npm...
EUVD-2025-72819
Malicious code in yappiestthrushrequirement npm...
EUVD-2025-64067
Malicious code in feministcamelz3n npm...
EUVD-2025-63287
Malicious code in liquidbandicootz3n npm...
EUVD-2025-62388
Malicious code in quintessentialperchz3n npm...
EUVD-2025-65432
Malicious code in addedmartenz3n npm...
EUVD-2025-65722
Malicious code in universalbarnaclez3n npm...