223 matches found
RUSTSEC-2025-0151 `sha-rst` was removed from crates.io for malicious code
This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...
`finch-rust` was removed from crates.io for malicious code
It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...
RUSTSEC-2025-0148 `finch-rust` was removed from crates.io for malicious code
It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...
EUVD-2025-75982
Malicious code in preferredfinch-tool npm...
EUVD-2025-81177
Malicious code in monthlyfinch0xrequest npm...
EUVD-2025-62721
Malicious code in parallelfinchz3n npm...
EUVD-2025-73163
Malicious code in unfairfinchz3n npm...
EUVD-2025-86677
Malicious code in continentalfinchz3n npm...
EUVD-2025-50900
Malicious code in ytterbic-olive-finch npm...
EUVD-2025-55375
Malicious code in collective-lime-finch npm...
EUVD-2025-52131
Malicious code in selfish-aqua-finch npm...
Malicious code in curved-rose-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in net-amaranth-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68935 Malicious code in intelligent-ivory-finch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34daa4b911876f9c7b1c003a475e0b603251248f4c115aa2904919d87b49079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51753
Malicious code in structural-maroon-finch npm...
EUVD-2025-52649
Malicious code in primary-indigo-finch npm...
EUVD-2025-51121
Malicious code in weary-white-finch npm...
EUVD-2025-52776
Malicious code in persistent-orange-finch npm...