1885 matches found
EUVD-2025-197614
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
CVE-2025-13204 CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
EUVD-2025-176691
Malicious code in report-thread-benchmark-good-fork npm...
EUVD-2025-177722
Malicious code in mysql-fork-pavo-firebase npm...
EUVD-2025-180012
Malicious code in book-compile-try-fork-kernel npm...
EUVD-2025-179708
Malicious code in cloud-star-parse-fork-sandbox npm...
Malicious code in cluster-wind-fork-view-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180160
Malicious code in babel-isostasy-fork-buffer npm...
EUVD-2025-179690
Malicious code in cluster-wind-fork-view-monitor npm...
EUVD-2025-175782
Malicious code in upsilon-fork-pi-index-emulate npm...
EUVD-2025-177411
Malicious code in orchestrate-awk-encrypt-moon-fork npm...
EUVD-2025-178859
Malicious code in fork-secure-code-daemon-abstract npm...
EUVD-2025-180004
Malicious code in boolean-fork-uglify-dog-sanitize npm...
EUVD-2025-180437
Malicious code in analyze-char-fork-theta-kernel npm...
EUVD-2025-176791
Malicious code in rate-limiter-fork-command-hyperion npm...
EUVD-2025-176479
Malicious code in secure-eta-throw-index-fork npm...
Malicious code in tau-fork-hot-web-big (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179616
Malicious code in concurrently-fork-blazar-helios npm...
Malicious code in rate-limiter-fork-command-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8de1f20d686d73ab00b93d7d050066e33427b1fe2051dc19a4ef17226e48fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...