12058 matches found
Malicious code in meissa-duplex-request-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc9a8d56bd914325daddf0f1c5c1d6a1d44632b799c474ae33e71c334883104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in start-io-nightwatch-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178943
Malicious code in farout-gatsby-install-ganymede npm...
MAL-2025-187586 Malicious code in jasmine-cypress-gravity-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35dd10a0b5c8d4d8b08bd196f82196d1f827f8aa2da53cab2ce753a17487cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176217
Malicious code in start-io-nightwatch-install npm...
Malicious code in biosignature-install-mocha-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175389
Malicious code in zooarchaeology-install-aether-extremophile npm...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-177916
Malicious code in meissa-duplex-request-install npm...
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
CVE-2025-61667
The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...
EUVD-2025-111153
Malicious code in middleware-nashira-install-loglevel npm...
EUVD-2025-116538
Malicious code in arcturus-ariel-install-eleventy npm...
EUVD-2025-112432
Malicious code in install-release-it-celeste-xanadu npm...
EUVD-2025-112422
Malicious code in install-writable-centaurus-wolf npm...
EUVD-2025-114636
Malicious code in dagda-install-global-library npm...
Malicious code in halley-enceladus-install-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112773
Malicious code in hexo-csrf-slides-install npm...