CRLF Injection

org.apache.heron, heron-api is vulnerable to CRLF Injection. The vulnerability is due to improper escaping of log input in log statements, which allows an attacker to inject malicious CRLF characters and manipulate log entries...

EUVD-2025-117520

Malicious code in adverse-amethyst-heron npm...

EUVD-2025-117455

Malicious code in dead-beige-heron npm...

EUVD-2025-117388

Malicious code in fantastic-copper-heron npm...

EUVD-2025-117300

Malicious code in injured-tomato-heron npm...

EUVD-2025-102990

Malicious code in primaryheronz3n npm...

EUVD-2025-103100

Malicious code in patientheronz3n npm...

MAL-2025-129667 Malicious code in querulous_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82839b30463af2c8508b89ddc99a336acb50933136760c9b696a373cab2f88ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105697

Malicious code in dutchheronz3n npm...

EUVD-2025-106561

Malicious code in architecturalheronz3n npm...

EUVD-2025-90320

Malicious code in longheronz3n npm...

Malicious code in agreeable_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdca95017de572b97689b1f25237b2964c812a007cde1515521ca7175df5bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80298

Malicious code in thirstyheronreplicateautomation npm...

EUVD-2025-70558

Malicious code in ethnicheronz3n npm...

MAL-2025-100701 Malicious code in combined_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a52e4ce2ee1ef885651335735768e6f4f2a24a458487d51317c91f71111b4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73895

Malicious code in rollingheronz3n npm...

EUVD-2025-73015

Malicious code in vitreousheronz3n npm...

EUVD-2025-62665

Malicious code in philosophicalheronz3n npm...

EUVD-2025-62853

Malicious code in nuttyheronrequirement npm...

MAL-2025-86090 Malicious code in gothic_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e8ea826c48f593fb595e26eb81ff5cc042fd8c59b701e50095d0a9ac55323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...