607 matches found
EUVD-2025-112380
Malicious code in iota-nestjs-firebase-rest npm...
MAL-2025-142492 Malicious code in firebase-cressida-commitlint-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149668 Malicious code in xenon-ursa-semantic-ui-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113597
Malicious code in firebase-selenium-fornax-nconf npm...
MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
pycodium (>=0.1.0 <=0.2.1), reflex-ai (>=0.1.0a1 <=0.1.0a18) +10 more potentially affected by CVE-2025-62379 via reflex (>=0.6.0a4 <=0.8.0a7)
reflex PYPI version =0.6.0a4, =0.1.0, =0.1.0a1, =0.2.0, =0.0.1, =0.1.6, =1.0.0, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-62379 Source advisory: OSV:GHSA-RFH5-C9H5-Q8JM...
EUVD-2021-1064
Malware in sbrugna...
EUVD-2018-5786
Malware in sbrugna...
EUVD-2023-43880
Malicious code in bioql PyPI...
EUVD-2024-48517
Malicious code in bioql PyPI...
EUVD-2024-1325
Malicious code in bioql PyPI...
EUVD-2025-24963
Malicious code in bioql PyPI...
EUVD-2024-52417
Malicious code in bioql PyPI...
EUVD-2024-34200
Malicious code in bioql PyPI...