196 matches found
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +165 more potentially affected by CVE-2026-44644 via liquidjs (>=10.2.0, <=10.25.7)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.0.2 and more Source cves: CVE-2026-44644 Source advisory: OSV:GHSA-2QV6-9WX5-CWV4...
4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3664 more potentially affected by CVE-2026-33941 via handlebars (>=4.0.0, <=4.7.8)
handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33941 Source advisory: OSV:GHSA-XJPJ-3MR7-GCPF...
Malicious code in firebase-selenology-blitz-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177197
Malicious code in phoenix-eleventy-io-radiant npm...
EUVD-2025-179545
Malicious code in cosmicray-nova-regulus-eleventy npm...
EUVD-2025-178441
Malicious code in impulse-blaze-yonder-eleventy npm...
Malicious code in transform-semantic-ui-eleventy-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc4d6e7b72b0aaa2abde280bb586981de8ed65cc2174a163599fb04f6fa777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179802
Malicious code in chai-juno-eleventy-hydrogeology npm...
Malicious code in areology-eleventy-cassini-filament (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177442
Malicious code in ophiuchus-eleventy-fornax-proxima npm...
EUVD-2025-178249
Malicious code in juno-eleventy-prettier-stylelint-rimraf npm...
EUVD-2025-179737
Malicious code in child-process-loglevel-elektra-eleventy npm...
EUVD-2025-179957
Malicious code in build-eleventy-deneb-gemini npm...
MAL-2025-185925 Malicious code in build-eleventy-deneb-gemini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186080 Malicious code in chai-juno-eleventy-hydrogeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651f6b98ef3ec7de1e3366e3618090aba6d851129a759dc82198724df69145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rocket-eleventy-alphard-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e513a76e72e1fca6eec63742d1bdca68ae829e5cdedb6e60687eab86480607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180334
Malicious code in areology-eleventy-cassini-filament npm...
EUVD-2025-176618
Malicious code in rocket-eleventy-alphard-changelog npm...
Malicious code in cosmicray-nova-regulus-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...