192 matches found
EUVD-2025-136554
Malicious code in sahufarf-satud-fa npm...
Malicious code in sgoodaini-ngsa-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e421bae6a2c75d82d0c1eb52a80808012b62811920b06a4deba1c92d4019a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-140101
Malicious code in miusan-fa-neraf npm...
EUVD-2025-140102
Malicious code in miusan-fa-biadavas npm...
Malicious code in polymer-avoafifa-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc75b3cca1381fc0a0dc7f978e8363534f399779695fecf6f4095c3537a2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138397
Malicious code in polymer-avoafifa-fa npm...
EUVD-2025-136686
Malicious code in sahuar-satidaf-fa npm...
MAL-2025-178672 Malicious code in sgoodaini-ngsa-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e421bae6a2c75d82d0c1eb52a80808012b62811920b06a4deba1c92d4019a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-140103
Malicious code in miusan-fa-aneraf npm...
EUVD-2025-141321
Malicious code in sgoodaini-ngsa-fa npm...
Malicious code in sahuar-satidaf-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885de369b9ee31edad3e43af69ba0b1c3e96d4943c59da9e51bcd1c225f2bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in miusan-fa-nerf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309d2b86b587b13b22bafa9fccfe793113dc0b72e3cacfc9c9b24c2e9b4f8969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-140100
Malicious code in miusan-fa-nerf npm...
EUVD-2025-144275
Malicious code in verts-otimmo-fa npm...
Malicious code in verts-otimmo-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365d13677892f914f249d5c1ef2013d39204fe53fb0f84ee3e64557707caf74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2021-4464: Stack-based Buffer Overflow
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service 'webs' fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun,...
Malicious code in tailwind-fa-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49354 Malicious code in tailwind-fa-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview tailwind-fa-bridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...