EUVD-2025-52686

Malicious code in precious-crimson-crow npm...

MAL-2025-67552 Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69124 Malicious code in level-yellow-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf0585845336e6aa4b90f78128dc3af918986bb33450dd034b45eabefad5e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66924 Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56445

Malicious code in workingcrowz3n npm...

EUVD-2025-57830

Malicious code in pregnantcrowz3n npm...

EUVD-2025-49793

Malicious code in moaningcrowz3n npm...

Malicious code in inland_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9fd04ef2a52b9448449e8f896c26aca51b9eaf92bc8446adae3a546c5780c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60326 Malicious code in dusty_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ef70512585cb0894edae61af39f53d69ff76af2a5c9e57709067a7b7f3b6a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60683 Malicious code in inland_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9fd04ef2a52b9448449e8f896c26aca51b9eaf92bc8446adae3a546c5780c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44387

Malicious code in yabberingcrowz3n npm...

EUVD-2025-45188

Malicious code in stripedcrowz3n npm...

EUVD-2021-10752

Malware in sbrugna...

EUVD-2021-10482

Malware in sbrugna...

EUVD-2023-29980

Malicious code in bioql PyPI...

EUVD-2022-41237

Malicious code in bioql PyPI...

EUVD-2022-41236

Malicious code in bioql PyPI...

CVE-2023-26142

All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not properly sanitized against CRLF Injection in the setheader and addheader functions. An attacker can add the \r\n carriage return line feeds...

CVE-2022-34970

Crow before 1.0+4 has a heap-based buffer overflow via the function qsparse in querystring.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service...