EUVD-2025-117397

Malicious code in expensive-sapphire-marsupial npm...

Malicious code in expensive_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dff4393c6991d06a15b58864f3610bd11c06c5abfeed6fc90a4afdd0020568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111880 Malicious code in expensive_roadrunner_silver-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e991d53d4efff9d9edae384576b10e1e8aa3db22c1084c57dfe6b6e173543cf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76911

Malicious code in expensivespoonbill-gooddev npm...

EUVD-2025-76910

Malicious code in expensivewhippet-strongdev npm...

EUVD-2025-76914

Malicious code in expensiveplanarian-excellentdev npm...

EUVD-2025-81983

Malicious code in expensivejunglefowlreplicateautomation npm...

EUVD-2025-70546

Malicious code in expensivegalliformz3n npm...

EUVD-2025-71581

Malicious code in expensiveroadrunnerz3n npm...

EUVD-2025-64179

Malicious code in expensivebedbugz3n npm...

EUVD-2025-64180

Malicious code in expensivebarracudaz3n npm...

EUVD-2025-86167

Malicious code in expensivetoucanz3n npm...

EUVD-2025-54480

Malicious code in expensive-coffee-dragon npm...

MAL-2025-68171 Malicious code in expensive-white-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3862006020dbe37b4fe086147cce3ecfdbd63306f6aaf3b08a5cd5b206745e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54479

Malicious code in expensive-emerald-ferret npm...

EUVD-2025-54477

Malicious code in expensive-yellow-quail npm...

EUVD-2025-59785

Malicious code in expensiveblackbirdz3n npm...

EUVD-2025-50247

Malicious code in expensiveeaglez3n npm...

EUVD-2022-2490

Malicious code in bioql PyPI...

CVE-2013-5750

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service CPU consumption via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation...