415 matches found
MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144106 Malicious code in karma-fornax-sequelize-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Package
Overview karma-verbose-summary-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
EUVD-2025-32642
Malicious code in karma-verbose-summary-reporter npm...
Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47994 Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2018-10128
Malware in sbrugna...
EUVD-2008-6246
Malware in sbrugna...
EUVD-2012-2422
Malware in sbrugna...
EUVD-2011-4041
Malware in sbrugna...
EUVD-2008-6245
Malware in sbrugna...
EUVD-2022-1123
Malicious code in bioql PyPI...
EUVD-2022-7104
Malicious code in bioql PyPI...
EUVD-2024-34992
Malicious code in bioql PyPI...
EUVD-2022-1168
Malicious code in bioql PyPI...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: dagdotdev, karpenter, secrets-store-csi-driver-provider-aws, openbao-k8s-fips, configmap-reload-fips, sftpgo-plugin-geoipfilter, nvidia-nsight-compute-12.9, blobfuse2, kubeflow-katib, local-path-provisioner, newrelic-fluent-bit-output, terraform-provider-sendgrid-fip...
Malicious code in karma-europa-australis-prompts (npm)
The package karma-europa-australis-prompts was found to contain malicious code...