EUVD-2025-105168

Malicious code in formidablewarblerz3n npm...

Malicious code in formidable_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5365098d113269e2b577f1496f0d77bb7c1fbe65ba2fd6a5107db18246f0cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91810

Malicious code in formidablekiwiz3n npm...

EUVD-2025-79205

Malicious code in formidableorangutanz3n npm...

EUVD-2025-63979

Malicious code in formidablebearz3n npm...

EUVD-2025-63978

Malicious code in formidablecapybaraz3n npm...

EUVD-2025-63977

Malicious code in formidablelampreyz3n npm...

MAL-2025-94577 Malicious code in formidable_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6c46d0c38a4c5589b071296bbd91b0e3887e1ec76aaee0262e57005936d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1f162b2393c2811d94adc510822b7d75b197019b0b292fcd452e082ed319ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54255

Malicious code in formidable-beige-krill npm...

EUVD-2025-54254

Malicious code in formidable-jade-iguana npm...

EUVD-2025-54252

Malicious code in formidable-white-frog npm...

Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54256

Malicious code in formidable-amaranth-anaconda npm...

EUVD-2025-54253

Malicious code in formidable-red-boa npm...

Malicious code in formidable_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2144839a8bdcc93edd12299ca7ef9bacecdc1261aab2d6319d1d8cf6cabdc822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50170

Malicious code in formidablelemmingz3n npm...

Malicious code in formidable_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c0b63cccacaf0dc3d197d40ce942132211173d9b99787200304482e52e901f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in formidable

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in formidable Vulnerability Details CVEID:CVE-2025-46653 DESCRIPTION: Formidable aka node-formidable 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in formidable-2.1.0.tgz

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in formidable-2.1.0.tgz Vulnerability Details CVEID:CVE-2025-46653 DESCRIPTION: Formidable aka node-formidable 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for...