4766 matches found
EUVD-2025-175803
Malicious code in unuk-uglify-js-astrochemistry-comet npm...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
EUVD-2025-176953
Malicious code in proxima-uglify-js-biomimicry-quasar npm...
Malicious code in uglify-js-gatsby-mocha-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35678a78049826e95243c5ef05b567ec7a727ae22384d50851840ccd22a90cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180051
Malicious code in biosignature-nestjs-publish-morgan npm...
EUVD-2025-178061
Malicious code in lithosphere-changelog-grunt-uglify-js npm...
EUVD-2025-178083
Malicious code in link-uglify-js-fermiparadox-auth npm...
EUVD-2025-179630
Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...
EUVD-2025-177200
Malicious code in phoenix-apollo-nextjs-nova npm...
Malicious code in unuk-uglify-js-astrochemistry-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57906ac6a4735bb92280c00660dfe0fcb082121021fc0d695fd942e50c6163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179539
Malicious code in cosmicweb-miranda-xerxes-uglify-js npm...
MAL-2025-187639 Malicious code in juno-uglify-js-tethys-thermochronology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
PT-2025-46851
Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 4.1.1 Description js-yaml is a JavaScript YAML parser and dumper. A flaw exists where an attacker can alter the prototype of a parsed YAML document, leading to prototype pollution. This impacts users parsing untrusted...
EUVD-2025-124498
Malicious code in nextjs-procyon-postcss-chai npm...
EUVD-2025-112580
Malicious code in ignite-xenos-uglify-js-hugo npm...
EUVD-2025-123600
Malicious code in polaris-antd-uglify-js-server npm...
EUVD-2025-124005
Malicious code in orbit-uglify-js-jsonp-jekyll npm...
Malicious code in uglify-js-dagda-await-parcel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243c74042d730e5159f494bcce2577e075e1b9b265b17bf81e37baff39aa8ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...