200 matches found
PT-2025-47803
Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner. Users with the scoped Project Manager user role with the Global User Read access permission enabled access to certain Project Administrator functionalities which should have be inaccessible...
EUVD-2025-117058
Malicious code in straight-blush-duck npm...
EUVD-2025-117417
Malicious code in electrical-orange-duck npm...
MAL-2025-138685 Malicious code in electrical-orange-duck (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-99751
Malicious code in diverseduckz3n npm...
EUVD-2025-102981
Malicious code in probableduckz3n npm...
EUVD-2025-101970
Malicious code in suspiciousduckz3n npm...
EUVD-2025-106632
Malicious code in amusedduckz3n npm...
EUVD-2025-104916
Malicious code in grossduckz3n npm...
MAL-2025-118685 Malicious code in amused_duck_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f5ff3abbef3f397f941417cc0c53b3fde2584cba9d0efebf184702e1bab300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-93760
Malicious code in youthfulduckz3n npm...
EUVD-2025-95874
Malicious code in outerduckz3n npm...
EUVD-2025-87833
Malicious code in weeklyduckz3n npm...
EUVD-2025-89586
Malicious code in olympicduckz3n npm...
EUVD-2025-74249
Malicious code in shiveringduckindigo-57 npm...
EUVD-2025-74711
Malicious code in efficientduckemerald-86 npm...
EUVD-2025-75469
Malicious code in tastyduck-excellentdev npm...
EUVD-2025-75946
Malicious code in prominentduck-appteadev npm...
MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...