aksharify (=0.2.0), buildbot-badges (>=1.7.0 <=1.8.2) +51 more potentially affected by CVE-2026-31899 via cairosvg (>=0.5.0 <=2.8.2)

cairosvg PYPI version =0.5.0, =1.7.0, =0.1.0, =0.20.7, =1.0.0b1, =0.0.2, =2025.5.0, =1.0.0, =0.1.0, =1.3.6, =0.2.2, =0.2.32 and more Source cves: CVE-2026-31899 Source advisory: OSV:GHSA-F38F-5XPM-9R7C...

EUVD-2025-117423

Malicious code in eerie-cyan-koala npm...

EUVD-2025-117233

Malicious code in medical-tan-koala npm...

MAL-2025-138679 Malicious code in eerie-cyan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6acb4888c9f675f5b4c5b83fba44f370e8deccf1e1ae5f15ce0db00e99a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102078

Malicious code in statisticalkoalaz3n npm...

EUVD-2025-99618

Malicious code in dramatickoalaz3n npm...

MAL-2025-130340 Malicious code in stingy_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aaf8fcae83ed22c3f6c975f6c59b0130618d34d943fdc30cb21002218e41ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95439

Malicious code in revolutionarykoalaz3n npm...

MAL-2025-122861 Malicious code in revolutionary_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab511cac9096d3cb059fcd3979dcc18e83eb1db2f6d068d7fde3002d3364ea44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92648

Malicious code in criminalkoalaz3n npm...

EUVD-2025-92439

Malicious code in disturbingkoalaz3n npm...

Malicious code in comparative_koala_gray-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39211ebe47510c492b782b320da6dc12ed878ab81ee702328088f564a9812e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_koala-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fc45cad77dc5a2185b5435fcef4b3a493f19c1553ec1fdbe624b8a2bcec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101687 Malicious code in dizzy_koala-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fc45cad77dc5a2185b5435fcef4b3a493f19c1553ec1fdbe624b8a2bcec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78200

Malicious code in strategickoalaz3n npm...

Malicious code in managing_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9675bde849153286a29aa0a5d1323dfd623288d97bb5081d451cc060c6dcdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a70b8d8f73a93d23c293ab86403d1af954068576415d90bf1215cdaf3a58f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e783b2320680db046a170b33210142fc91e99108ba4b7bd941420482db54093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77968

Malicious code in visitingkoalaz3n npm...