EUVD-2025-117374

Malicious code in fond-copper-platypus npm...

EUVD-2025-98778

Malicious code in fondbasiliskz3n npm...

EUVD-2025-98777

Malicious code in fondmolluskz3n npm...

EUVD-2025-105173

Malicious code in fondnarwhalz3n npm...

MAL-2025-120129 Malicious code in fond_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49cac021a74d6b606f55fc84af0120db4f424ad0366f88f3414d4050e09ee56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81882

Malicious code in fondlion0xrequest npm...

EUVD-2025-81883

Malicious code in fondcaribou0xrequest npm...

MAL-2025-102852 Malicious code in fond_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2074bf7b4f1c461d43293fae80e554eb849aa81fa33d7822493048b4891ecf8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5934746beb1a48fdf7e39d5434a29a22111543d6ada601210b52b27b91c7382e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68379 Malicious code in fond-black-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592b57de1acdfb17aa00811a817e05b59af4256770802827f1cc02c6209de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-green-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7ad104d88be29df9d1e17af67460b66c5c99c7594d8c31a4f666dff8cfd30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-black-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592b57de1acdfb17aa00811a817e05b59af4256770802827f1cc02c6209de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54269

Malicious code in fond-green-moth npm...

EUVD-2025-54270

Malicious code in fond-black-catshark npm...

EUVD-2025-54268

Malicious code in fond-lavender-junglefowl npm...

MAL-2025-68380 Malicious code in fond-green-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7ad104d88be29df9d1e17af67460b66c5c99c7594d8c31a4f666dff8cfd30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4170d5bc98df12de23efa5254bc62879d7841b892c33ce9f06384e4cf8611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50173

Malicious code in fondrattlesnakez3n npm...

SUSE CVE-2014-9672

Array index error in the parsefond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service out-of-bounds read or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file...

fond-noir.com Cross Site Scripting vulnerability OBB-2667433

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...