6867 matches found
EUVD-2025-178925
Malicious code in fetch-blackhole-framework-apollo npm...
Malicious code in fetch-charon-callisto-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62550fec98515505f3376660a176a2b13482b88711b0022c9925a9b825e4fb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180240
Malicious code in auriga-eslint-halley-fetch npm...
EUVD-2025-180449
Malicious code in alphard-fetch-electron-builder-levels npm...
EUVD-2025-178104
Malicious code in library-fetch-hyperion-vortex npm...
Malicious code in winston-process-fetch-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32310e6d14f06422f625862322cf64c1e6a08c795148c10b8a5c50e384c2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185648 Malicious code in auriga-eslint-halley-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0bd6588a9174fc25cd49a2b2bb3fb8a2d06d58e3da4b7775a007a7ce02483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179649
Malicious code in command-leda-fetch-delphinus npm...
EUVD-2025-177956
Malicious code in markdown-less-loader-joviology-fetch npm...
MAL-2025-188075 Malicious code in miranda-koa-fetch-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178924
Malicious code in fetch-charon-callisto-meissa npm...
Malicious code in epimetheus-release-it-fetch-centaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc286cddc9b68a29d158425dc814ed9cc8de7a7cdd3c89822a899de1ace22dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185543 Malicious code in arcturus-fornax-thuban-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009c927b5e00df689b7d6fb41e960faddd6fa557d4deb76f787a5556c51e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178922
Malicious code in fetch-ursa-vega-grus npm...
Malicious code in auriga-eslint-halley-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0bd6588a9174fc25cd49a2b2bb3fb8a2d06d58e3da4b7775a007a7ce02483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177485
Malicious code in odin-fetch-arcturus-cressida npm...
EUVD-2025-175524
Malicious code in xanadu-singularitarianism-fetch-fermion npm...
CVE-2025-64752: Server-Side Request Forgery (SSRF)
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
