MAL-2025-59135 Malicious code in umi-tek10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d8f32eca74de0e2fb5b12d86d5e6f421b51067d01ebc704a1965bfa4a26ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45715

Malicious code in putri-jus52-sukiwir npm...

Malicious code in riana-tempe79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e579f3a7b3e732d89f1a88237eabbf4ddad094a009b8671752264faec0e48595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-43561

Malicious code in kurniawan-tomat61-sluey npm...

EUVD-2025-39356

Malicious code in udin-bika32-riris npm...

EUVD-2025-39351

Malicious code in udin-empal63-ruro npm...

Malicious code in andi-gado-gado79-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd98ff06bcab586b5c7801c31a9ad7d6c7b6e36a9ace08ee5dda7492d6d32c The package andi-gado-gado79-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2025-41228

Malicious code in dian-miebogor16-riris npm...

MAL-2025-49459 Malicious code in elf-stats-storybook-cookiejar-880 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a568cb0be6c18f5ce4e4ab81bd7dfe0b1026ba19749c2fee13f5ba70a586b4 The package elf-stats-storybook-cookiejar-880 was found to contain malicious code...

EUVD-2025-37445

Malicious code in webswing-directdraw-javascript npm...

EUVD-2025-36841

Malicious code in ing-web-es npm...

EUVD-2025-36092

Malicious code in polyfill-corejs3 npm...

MAL-2025-48869 Malicious code in skiko-wasm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48552 Malicious code in tailwindcss-awesomefont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85ee9e62f66e09344e931a1854ac52622771856fda95ece5f148374cc50b406b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33625

Malicious code in js-notifiers npm...

EUVD-2025-33528

Malicious code in redirect-whb6rt npm...

EUVD-2025-32981

Malicious code in cf-editor-generate-variation npm...

Malicious code in 1uniswapinterface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7829f154ef32af006e497f0229a2578cbf439ff13a8dd84e1673d53c56570779 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2023-1644

Malicious code in bioql PyPI...

Duplicate Advisory: rollbar vulnerable to prototype pollution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r8c2-2qwq-94p6. This link is maintained to preserve external references. Original Description rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package include...