EUVD-2025-197614

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

CVE-2025-13204 CVE-2025-13204

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

CVE-2025-13204

CVE-2025-13204 (npm expr-eval) is a Prototype Pollution vulnerability in the expr-eval package. An attacker with access to the express eval interface can leverage JavaScript prototype-based inheritance to achieve arbitrary code execution. The issue is mitigated by the npm expr-eval-fork package, ...

EUVD-2025-178860

Malicious code in fork-playwright-joviology-accretion npm...

EUVD-2025-177186

Malicious code in phylogenetics-fork-tectonic-cosmology npm...

EUVD-2025-177847

Malicious code in middleware-antares-bootstrap-fork npm...

EUVD-2025-176791

Malicious code in rate-limiter-fork-command-hyperion npm...

EUVD-2025-178857

Malicious code in fork-winston-apollo-yaml npm...

EUVD-2025-177411

Malicious code in orchestrate-awk-encrypt-moon-fork npm...

EUVD-2025-176059

Malicious code in tau-fork-hot-web-big npm...

EUVD-2025-175865

Malicious code in try-import-fork-socket-beta npm...

EUVD-2025-177722

Malicious code in mysql-fork-pavo-firebase npm...

EUVD-2025-177915

Malicious code in meissa-ethology-centauri-fork npm...

EUVD-2025-178863

Malicious code in fork-lightyear-commitlint-unuk npm...

EUVD-2025-180322

Malicious code in array-benchmark-socket-dog-fork npm...

EUVD-2025-179868

Malicious code in cassini-markdown-pdf-fork-polaris npm...

EUVD-2025-178385

Malicious code in install-fork-mdx-websockets npm...

EUVD-2025-180160

Malicious code in babel-isostasy-fork-buffer npm...

Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...