EUVD-2025-179624

Malicious code in compile-catch-gamma-encode-resolve npm...

EUVD-2025-180263

Malicious code in async-parse-compile-sanitize-quick npm...

MAL-2025-190253 Malicious code in web-compile-deploy-load-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b89eb11df0d45c9af94679854dc0e9edd6be08c36b6b9efed4a24abaf2a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176183

Malicious code in string-compile-module-benchmark-report npm...

EUVD-2025-177020

Malicious code in promise-compile-interface-benchmark-fire npm...

Malicious code in pi-quick-cron-book-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf44e489d6db17c47113c34f0e8b7584c52a1b98fc559ea0dbd9fb498ae230f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176388

Malicious code in sigma-compile-simulate-integer-bash npm...

EUVD-2025-179621

Malicious code in compile-xi-small-star-decompress npm...

EUVD-2025-175957

Malicious code in thread-compile-parse-decrypt-air npm...

EUVD-2025-178449

Malicious code in import-compile-compile-bad-report npm...

EUVD-2025-177178

Malicious code in pi-quick-cron-book-compile npm...

MAL-2025-189692 Malicious code in string-compile-module-benchmark-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32edf99d2adb837e219033e596267b024daa93bbe2f9e9e2030e20bfffdffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179622

Malicious code in compile-validate-sandbox-node-async npm...

EUVD-2025-176991

Malicious code in protected-old-compile-java-enum npm...

Malicious code in water-omega-compile-pipe-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c384897424d689290428902abecc2d8b7ec9bf3b44809f6125a0e31960c0223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176590

Malicious code in route-compile-good-private-tree npm...

EUVD-2025-178957

Malicious code in export-zero-orchestrate-zero-compile npm...

Eval Injection

Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...