759 matches found
EUVD-2025-134660
Malicious code in anala-aki-ini npm...
EUVD-2025-141889
Malicious code in goodafiun-tufa-ini npm...
MAL-2025-178073 Malicious code in polymer-ini-verst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbe649922eb1063312557a09b709f0850b12ecf21684f2025b76ce62509eee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137507
Malicious code in polymer-ini-verst npm...
Malicious code in polymer-ini-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
EUVD-2025-112518
Malicious code in ini-neptune-mongodb-mensa npm...
MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115590
Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini npm...
EUVD-2025-112504
Malicious code in ini-tailwindcss-playwright-nova npm...
EUVD-2025-112528
Malicious code in ini-cypress-celeste-pegasus npm...
EUVD-2025-113600
Malicious code in firebase-rigel-fornax-ini npm...
EUVD-2025-111306
Malicious code in meissa-ini-xo-fomalhaut npm...
EUVD-2025-112503
Malicious code in ini-vuetify-test-chakra-ui npm...
EUVD-2025-121406
Malicious code in terser-ini-sadr-nebula npm...
Malicious code in jest-vortex-ini-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112175
Malicious code in jest-vortex-ini-foundation npm...