org.webjars.npm:adal-node (=0.1.28), org.webjars.npm:canvg (>=1.5.2 <=1.5.3) +14 more potentially affected by CVE-2026-41675 via org.webjars.npm:xmldom (>=0.1.31 <=0.6.0)

org.webjars.npm:xmldom MAVEN version =0.1.31, =1.5.2, =0.7.2, =0.14.0, =0.11.0, =7.14.0, =2.7.0, =2.9.2 and more Source cves: CVE-2026-41675 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16134553...

MAL-2026-2732 Malicious code in buildkite-test-collector-jasmine-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e8247a020880206aa9a5d4eb40d4b1f61cf39245356fd6e91db063d0c14b79 The package buildkite-test-collector-jasmine-example was found to contain malicious code...

Malicious code in buildkite-test-collector-jasmine-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e8247a020880206aa9a5d4eb40d4b1f61cf39245356fd6e91db063d0c14b79 The package buildkite-test-collector-jasmine-example was found to contain malicious code...

org.webjars.npm:chai-backbone (=0.9.2), org.webjars.npm:express (=5.1.0) +5 more potentially affected by CVE-2026-4923 via org.webjars.npm:path-to-regexp (=8.2.0)

org.webjars.npm:path-to-regexp MAVEN version =8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:path-to-regexp and may be impacted: - org.webjars.npm:chai-backbone =0.9.2 - org.webjars.npm:express =5.1.0 -...

org.webjars.npm:chai-backbone (=0.9.2), org.webjars.npm:express (=5.1.0) +5 more potentially affected by CVE-2026-4926 via org.webjars.npm:path-to-regexp (=8.2.0)

org.webjars.npm:path-to-regexp MAVEN version =8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:path-to-regexp and may be impacted: - org.webjars.npm:chai-backbone =0.9.2 - org.webjars.npm:express =5.1.0 -...

EUVD-2025-177233

Malicious code in petrology-supercluster-relay-jasmine npm...

EUVD-2025-178182

Malicious code in koa-higgs-jasmine-wezen npm...

EUVD-2025-177004

Malicious code in prompts-jasmine-wolf-duplex npm...

EUVD-2025-178911

Malicious code in filament-axios-node-config-jasmine npm...

Malicious code in biosignature-jasmine-solis-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6320a51a6ff5ec4676483ba7f9cfb24e153d3e1ac3ff03e68da55a92a0610f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177522

Malicious code in nova-virgo-jasmine-redshift npm...

EUVD-2025-175598

Malicious code in webdriverio-jasmine-dione-perseus npm...

EUVD-2025-178296

Malicious code in jasmine-cypress-gravity-install npm...

EUVD-2025-177512

Malicious code in nuxtjs-enceladus-miranda-jasmine npm...

Malicious code in eslint-loop-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c329a482c68f847b5078bc7c6cd99a0df89ac2ee483147aa5ed8810a29dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

MAL-2025-188370 Malicious code in nuxtjs-enceladus-miranda-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b43759d17c66985697b3c9e19ac0173377814fe579478b446243f3da452a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178355

Malicious code in ionosphere-tachyon-arcturus-jasmine npm...

Malicious code in koa-higgs-jasmine-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185467 Malicious code in antares-jasmine-rocket-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aee983d1436336ccf9ed5669ffc4797960cd6c4e50b1ef18c630a481685241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...