4645 matches found
Malicious code in atlas-uglify-js-dependencies-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123994
Malicious code in package-dactyl-callisto-nuxtjs npm...
EUVD-2025-114411
Malicious code in dorado-uglify-js-gemini-chalk npm...
EUVD-2025-121050
Malicious code in uglify-js-quantum-vuepress-publish npm...
Malicious code in scorpius-uglify-js-grunt-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116570
Malicious code in apollo-ursa-tailwindcss-uglify-js npm...
EUVD-2025-121047
Malicious code in uglify-js-restart-delphinus-hugo npm...
Malicious code in sequelize-nashira-rigel-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59d6fb63fb5556a47a76185951f64c80c5d8364358472ed927bf91c9fa3fdcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115874
Malicious code in bulma-ultra-meteor-uglify-js npm...
EUVD-2025-121056
Malicious code in uglify-js-eslint-callisto-meissa npm...
EUVD-2025-112992
Malicious code in gulp-nodejs-bellatrix-process npm...
MAL-2025-149653 Malicious code in xenon-nodejs-tethys-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f998b73247e2553cb330b9d4d12e6bb5b72e648412770d6e7174d29c01c3dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147504 Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75204
Malicious code in worriedcod-gooddev npm...
EUVD-2025-62316
Malicious code in regionalfireflyz3n npm...
CVE-2025-13018
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...
EUVD-2025-44032
Malicious code in reactjs-fabric npm...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the jsarraybufferslice function. An attacker can access sensitive information or cause application instability by triggering a buffer over-read through crafted input. Remediation A fix was pushed into the...
Malicious code in bcryptjs-node-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f621b58cc468b09e5963a64bef46446818cfa742ca51366a9e256bdb6299b8 The package bcryptjs-node-js was found to contain malicious code. Source: ghsa-malware 3b410282355b8584d4b9c012154aed901dfd650f212d1a2a942d901ae693f3...