4644 matches found
EUVD-2025-179539
Malicious code in cosmicweb-miranda-xerxes-uglify-js npm...
MAL-2025-187639 Malicious code in juno-uglify-js-tethys-thermochronology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
PT-2025-46851
Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 4.1.1 Description js-yaml is a JavaScript YAML parser and dumper. A flaw exists where an attacker can alter the prototype of a parsed YAML document, leading to prototype pollution. This impacts users parsing untrusted...
EUVD-2025-124005
Malicious code in orbit-uglify-js-jsonp-jekyll npm...
Malicious code in uglify-js-dagda-await-parcel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243c74042d730e5159f494bcce2577e075e1b9b265b17bf81e37baff39aa8ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122931
Malicious code in quito-eris-markdown-pdf-uglify-js npm...
EUVD-2025-124340
Malicious code in nodemon-geckodriver-mongodb-uglify-js npm...
EUVD-2025-112863
Malicious code in helmet-dactyl-flare-uglify-js npm...
EUVD-2025-112871
Malicious code in helios-uglify-js-nextjs-kaus npm...
EUVD-2025-120459
Malicious code in wezen-uglify-js-stop-regulus npm...
EUVD-2025-121063
Malicious code in uglify-js-apollo-cosmos-karma npm...
EUVD-2025-122889
Malicious code in rate-limiter-carina-despina-uglify-js npm...
EUVD-2025-120185
Malicious code in xo-despina-uglify-js-neptune npm...
EUVD-2025-121052
Malicious code in uglify-js-nuxtjs-karma-atlas npm...
EUVD-2025-115715
Malicious code in capella-materialize-uglify-js-webdriverio npm...
EUVD-2025-121210
Malicious code in toml-nestjs-achernar-spectron npm...
Malicious code in uglify-js-nestjs-fornax-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115978
Malicious code in bootstrap-uglify-js-proxima-transform npm...