722 matches found
EUVD-2025-134629
Malicious code in analua-aki-ini npm...
Malicious code in analusa-aki-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd27dc07251b4d47ebe088ba06c4a9ad456c519c4b922cf340fa4a7f0bde189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134661
Malicious code in anala-aki-ini npm...
EUVD-2025-134660
Malicious code in anala-aki-ini npm...
EUVD-2025-134628
Malicious code in analua-aki-ini npm...
EUVD-2025-134600
Malicious code in analusa-aki-ini npm...
EUVD-2025-134601
Malicious code in analusa-aki-ini npm...
EUVD-2025-141889
Malicious code in goodafiun-tufa-ini npm...
EUVD-2025-137507
Malicious code in polymer-ini-verst npm...
MAL-2025-178073 Malicious code in polymer-ini-verst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbe649922eb1063312557a09b709f0850b12ecf21684f2025b76ce62509eee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-ini-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
Malicious code in ini-chalk-cors-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056bc82713174866f848920d37b5631378c0586896ed08ae0f33e06e27aaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112175
Malicious code in jest-vortex-ini-foundation npm...
Malicious code in duplex-vuepress-ini-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a17ac0306d65a92bb6331bba707a8b9b14665480db55f8345b768c957e75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114874
Malicious code in cressida-ini-markdownlint-yakutsk npm...
EUVD-2025-112525
Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...
EUVD-2025-112519
Malicious code in ini-middleware-build-xo npm...
Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...