11976 matches found
EUVD-2025-180350
Malicious code in archaeometry-rollup-plugin-astro-install npm...
EUVD-2025-178387
Malicious code in install-enceladus-mesosphere-superflare npm...
EUVD-2025-178215
Malicious code in karma-install-spectron-bootes npm...
EUVD-2025-180392
Malicious code in apollo-aldebaran-miranda-install npm...
Malicious code in biosignature-install-mocha-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175389
Malicious code in zooarchaeology-install-aether-extremophile npm...
EUVD-2025-178579
Malicious code in heka-buffer-install-transform npm...
EUVD-2025-178683
Malicious code in got-install-blackhole-pipe npm...
EUVD-2025-180053
Malicious code in biosignature-install-mocha-vortex npm...
EUVD-2025-178314
Malicious code in janus-chai-umbriel-install npm...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-61667
The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...
EUVD-2025-121194
Malicious code in tool-fornax-polaris-install npm...
EUVD-2025-121138
Malicious code in transport-install-unuk-deimos npm...
EUVD-2025-120985
Malicious code in umbriel-install-cygnus-markdown npm...
EUVD-2025-120604
Malicious code in webdriver-manager-magellan-install-eslint npm...