9219 matches found
EUVD-2025-178829
Malicious code in frontend-uninstall-foundation-prettier npm...
EUVD-2025-179547
Malicious code in cosmicray-foundation-nconf-plutology npm...
EUVD-2025-176915
Malicious code in publish-vuepress-sails-foundation npm...
EUVD-2025-179826
Malicious code in centauri-xenobiology-prompts-foundation npm...
Malicious code in browserify-astrometry-stratigraphy-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in foundation-node-config-farout-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175643
Malicious code in wasat-foundation-webdriverio-eslint npm...
MAL-2025-187039 Malicious code in foundation-await-pavo-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188960 Malicious code in publish-vuepress-sails-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187040 Malicious code in foundation-node-config-farout-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187869 Malicious code in loopback-magellan-foundation-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9be3358b5196be685222ab977cbc9e55f402b2b9a88a7ef872d91c7115e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
DEBIAN-CVE-2025-64500
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
EUVD-2025-124696
Malicious code in mutation-foundation-mocha-cosmos npm...
EUVD-2025-120697
Malicious code in vulcan-exec-foundation-gridsome npm...
EUVD-2025-113447
Malicious code in foundation-aether-fornax-duplex npm...
EUVD-2025-122659
Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...