EUVD-2025-43137

Malicious code in ocha-sambel51-breki npm...

EUVD-2025-43982

Malicious code in gita-telur80-sluey npm...

EUVD-2025-43489

Malicious code in lutfi-otak-otak8-miaww npm...

EUVD-2025-38743

Malicious code in ocha-sroto99-apidev npm...

EUVD-2025-43348

Malicious code in nadia-miebogor86-sluey npm...

EUVD-2025-43197

Malicious code in nurul-sego2-ruro npm...

EUVD-2025-43191

Malicious code in nurul-teh60-sukiwir npm...

EUVD-2025-39577

Malicious code in fitri-jengkol39-breki npm...

EUVD-2025-39778

Malicious code in eko-tempe28-miaww npm...

EUVD-2025-41203

Malicious code in dono-tek26-miaww npm...

create-bamboo (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via bamboo-init (1.0.7)

bamboo-init NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on bamboo-init and may be impacted: - create-bamboo =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-50934...

EUVD-2025-39946

Malicious code in dewi-rujaksoto45-breki npm...

EUVD-2025-41678

Malicious code in andi-semur44-breki npm...

EUVD-2025-41534

Malicious code in budi-empal24-ruro npm...

EUVD-2025-39204

Malicious code in vina-martabak30-sukiwir npm...

Malicious code in candra-tongseng89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b839915eddb3990d12210a729bd9589048ab104c266b5687908cf0907fbd4d The package candra-tongseng89-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2025-38563

Malicious code in @secretcollect/identity-core npm...

CVE-2025-12099

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'importallcourses' function. This makes it possible for authenticated...

EUVD-2025-38367

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'importallcourses' function. This makes it possible for authenticated...

CVE-2025-12099

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'importallcourses' function. This makes it possible for authenticated...