EUVD-2025-143288

Malicious code in anita-buy-mag npm...

MAL-2025-173015 Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143285

Malicious code in anita-buyau-mag npm...

EUVD-2025-143258

Malicious code in anita-manahudd-mag npm...

EUVD-2025-143287

Malicious code in anita-buyafu-mag npm...

EUVD-2014-7338

Malware in sbrugna...

EUVD-2008-4445

Malware in sbrugna...

EUVD-2025-12080

Malicious code in bioql PyPI...

EUVD-2025-8414

Malicious code in bioql PyPI...

EUVD-2023-32608

Malicious code in bioql PyPI...

EUVD-2023-32289

Malicious code in bioql PyPI...

MAL-2025-25755 Malicious code in mag-sdk-core (npm)

The package mag-sdk-core was found to contain malicious code...

Malicious code in mag-sdk-core (npm)

The package mag-sdk-core was found to contain malicious code...

MAL-2025-25754 Malicious code in mag-app-youtubetesting (npm)

The package mag-app-youtubetesting was found to contain malicious code...

MAL-2025-25753 Malicious code in mag-app-youtubetest (npm)

The package mag-app-youtubetest was found to contain malicious code...

Malicious code in mag-app-youtubetest (npm)

The package mag-app-youtubetest was found to contain malicious code...

Malicious code in mag-app-youtubetesting (npm)

The package mag-app-youtubetesting was found to contain malicious code...

CVE-2023-28621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wishfulthemes Raise Mag, Wishfulthemes Wishful Blog themes allows Reflected XSS.This issue affects Raise Mag: from n/a through 1.0.7; Wishful Blog: from n/a through 2.0.1...

CVE-2023-28990

Missing Authorization vulnerability in HashThemes Viral Mag allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Viral Mag: from n/a through 1.0.9...

Malicious code in mag-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 176013c7da15d3a2ba1b47d046d94b0397bfa720043788e097796ae84cf81258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...