198 matches found
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +167 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.0, =0.8.0, =0.31.16 - @altipla/directus-sdk-utils 0.7.2 and more Source cves: CVE-2026-44644 Source advisory: OSV:GHSA-2QV6-9WX5-CWV4...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3655 more potentially affected by CVE-2026-33941 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33941 Source advisory: OSV:GHSA-XJPJ-3MR7-GCPF...
Malicious code in rocket-eleventy-alphard-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e513a76e72e1fca6eec63742d1bdca68ae829e5cdedb6e60687eab86480607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176618
Malicious code in rocket-eleventy-alphard-changelog npm...
EUVD-2025-176498
Malicious code in scorpius-chalk-eleventy-kaus npm...
EUVD-2025-178249
Malicious code in juno-eleventy-prettier-stylelint-rimraf npm...
EUVD-2025-178889
Malicious code in firebase-selenology-blitz-eleventy npm...
EUVD-2025-179737
Malicious code in child-process-loglevel-elektra-eleventy npm...
EUVD-2025-179802
Malicious code in chai-juno-eleventy-hydrogeology npm...
EUVD-2025-179545
Malicious code in cosmicray-nova-regulus-eleventy npm...
Malicious code in transform-semantic-ui-eleventy-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc4d6e7b72b0aaa2abde280bb586981de8ed65cc2174a163599fb04f6fa777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177442
Malicious code in ophiuchus-eleventy-fornax-proxima npm...
Malicious code in firebase-selenology-blitz-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176446
Malicious code in selenium-cluster-framework-eleventy npm...
EUVD-2025-178441
Malicious code in impulse-blaze-yonder-eleventy npm...
Malicious code in areology-eleventy-cassini-filament (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175906
Malicious code in transform-semantic-ui-eleventy-phoebe npm...
EUVD-2025-179164
Malicious code in eleventy-delphinus-figures-async npm...