EUVD-2025-77664

Malicious code in comprehensiveslugviolet-67 npm...

EUVD-2025-79574

Malicious code in comprehensivealligatorz3n npm...

EUVD-2025-82422

Malicious code in comprehensivewhale0xrequest npm...

EUVD-2025-82424

Malicious code in comprehensivekiwidumbs npm...

MAL-2025-100796 Malicious code in comprehensive_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c2f79669cc6a3652f49b2c289d00c2d527045875b2fcf647ae1088d19011ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64860

Malicious code in comprehensivespoonbillz3n npm...

EUVD-2025-64863

Malicious code in comprehensivebearz3n npm...

EUVD-2025-64861

Malicious code in comprehensiverookrequirement npm...

EUVD-2025-64862

Malicious code in comprehensivellamarequirement npm...

EUVD-2025-86692

Malicious code in comprehensivecheetahz3n npm...

EUVD-2025-86693

Malicious code in comprehensivebisonz3n npm...

EUVD-2025-55269

Malicious code in comprehensive-peach-lemur npm...

EUVD-2025-55270

Malicious code in comprehensive-indigo-egret npm...

EUVD-2025-55272

Malicious code in comprehensive-copper-dingo npm...

Malicious code in comprehensive-cyan-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30b2d0ad5055335cccbae866b0857106de84e7d0cc0b22ca4f9581b47274423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55271

Malicious code in comprehensive-cyan-elk npm...

EUVD-2025-60259

Malicious code in comprehensivesquirrelz3n npm...

EUVD-2025-50530

Malicious code in comprehensivelandfowlz3n npm...

EUVD-2025-50531

Malicious code in comprehensivekitez3n npm...

VulnCheck KEV: CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...