12071 matches found
EUVD-2025-176340
Malicious code in slidev-levels-install-jasmine npm...
Malicious code in biosignature-install-mocha-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-61667
The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...
EUVD-2025-111153
Malicious code in middleware-nashira-install-loglevel npm...
EUVD-2025-116538
Malicious code in arcturus-ariel-install-eleventy npm...
EUVD-2025-112432
Malicious code in install-release-it-celeste-xanadu npm...
EUVD-2025-112422
Malicious code in install-writable-centaurus-wolf npm...
EUVD-2025-114636
Malicious code in dagda-install-global-library npm...
Malicious code in halley-enceladus-install-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112773
Malicious code in hexo-csrf-slides-install npm...
EUVD-2025-121037
Malicious code in ultra-dynamo-foundation-install npm...
EUVD-2025-112446
Malicious code in install-aquarius-jasmine-thuban npm...
EUVD-2025-114539
Malicious code in dependencies-install-xenon-venus npm...
EUVD-2025-112632
Malicious code in hyperion-janus-install-markdown-pdf npm...
Malicious code in hexo-csrf-slides-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121138
Malicious code in transport-install-unuk-deimos npm...
EUVD-2025-122078
Malicious code in semantic-ui-dorado-install-version npm...