13868 matches found
EUVD-2025-46468
Malicious code in majorcodz3n npm...
MAL-2025-55514 Malicious code in candra-takokak92-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b94aab6bd9c02998dac8e89926e7de48d9867e6e1cccbf0982e9a0325337c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-46081
Malicious code in nurul-rawon85-sukiwir npm...
EUVD-2025-44836
Malicious code in umi-toge65-sukiwir npm...
EUVD-2025-47242
Malicious code in hendra-oblok41-sukiwir npm...
EUVD-2025-48879
Malicious code in ade-tongseng63-sukiwir npm...
EUVD-2025-47320
Malicious code in hadianto-toge65-sukiwir npm...
EUVD-2025-47328
Malicious code in hadianto-sambalado58-sukiwir npm...
EUVD-2025-45882
Malicious code in orthodoxclownfishz3n npm...
EUVD-2025-45667
Malicious code in qori-bakwan2-sukiwir npm...
EUVD-2025-46261
Malicious code in nadia-kemplang40-sukiwir npm...
Malicious code in hendra-kupang62-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2033d14a1d62b02c6e85d74fb53087852795c2ff1881541141ce4789eb5ce307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-44368
Malicious code in yanti-gulai27-sukiwir npm...
EUVD-2025-44160
Malicious code in zaki-peyek77-sukiwir npm...
9 Key Areas to Monitor for Potential Security Threats
The old "castle-and-moat" approach to security is a thing of the past. Your organization's perimeter is no longer a single, defensible line; it's a distributed and porous collection of remote employees, cloud services, and third-party vendors. Every connection is a potential entry point, and your...
Prototype Pollution
node-cube is vulnerable to Prototype Pollution. The vulnerability is due to improper validation of user-supplied input during the prototype chain initialization process, which allows an attacker to inject malicious properties into built-in object prototypes, potentially leading to denial of servi...
@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)
cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: OSV:GHSA-G4MF-96X5-5M2C...
MAL-2025-53973 Malicious code in okta-nasipecel81-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e165563ad4c192505fba740c2ed703d8610244787463ba0f7619ac272cc8a070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...