10276 matches found
EUVD-2025-178385
Malicious code in install-fork-mdx-websockets npm...
EUVD-2025-178314
Malicious code in janus-chai-umbriel-install npm...
EUVD-2025-180392
Malicious code in apollo-aldebaran-miranda-install npm...
Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-176340
Malicious code in slidev-levels-install-jasmine npm...
EUVD-2025-179605
Malicious code in config-event-install-lacerta npm...
EUVD-2025-178579
Malicious code in heka-buffer-install-transform npm...
EUVD-2025-180404
Malicious code in antimatter-slidev-install-void npm...
EUVD-2025-177057
Malicious code in primatology-middleware-planckscale-install npm...
EUVD-2025-178508
Malicious code in html-webpack-plugin-hologram-stream-install npm...
Malicious code in biosignature-install-mocha-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180053
Malicious code in biosignature-install-mocha-vortex npm...
EUVD-2025-176217
Malicious code in start-io-nightwatch-install npm...
MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-61667
The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...
Malicious code in loopback-install-cosmos-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...