MAL-2025-192293 Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

Malicious code in orbit-nebula-draw-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662afde2ebe0d7c2a8537b2bdab8226b61daf75ff4e54ad51bf5bb7eee8eb The package redux-forge was found to contain malicious code. Source: ghsa-malware f80cb61ec8f9b4f1ee385b40c40e1816cb61a012074ddc792d16f433c6a32294 An...

Malicious code in lion-second-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070c2e566c699a1be9bf159d90a6b42fad16d6c4f74b7315c262ed5e5897f09 The package lion-second-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190511 Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

MAL-2025-133830 Malicious code in gita-mieayam94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6f16f44b9223c33b32d41cdd5c130131a0331bd47cd65ef19ccb2f98b3cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102362

Malicious code in sari-miebogor53-riris npm...

EUVD-2025-80714

Malicious code in resultingcapybara0xrequest npm...

MAL-2025-95371 Malicious code in mammoth_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4fb8faa632bdd3b33d4ea9dfada639ee5a7005ed32155e19d9e2f3b8e9019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-58812

Malicious code in kiki-semur83-sluey npm...

MAL-2025-49328 Malicious code in parallel-coordinates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a6532ff0ec9ac1daec9c21c05c508de189c1f5d5012fc6b8aee4feb9ce2b43 The package parallel-coordinates was found to contain malicious code. Source: ghsa-malware...

Malicious code in monophonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638fb2d3ef5574e603743a5f8545f9bd01c8d2f544f628cbe041b12a94497155 The package monophonic was found to contain malicious code. Source: ghsa-malware 7a86916baf347f5489f90e15cce360f5a7bea0ba71f59130e66754f1c4acec9a Any...

MAL-2025-49258 Malicious code in genesis-drop-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edb9a242cd3f939420031dd53e6057ae90e644f3a08fdc50bc1f92d1296832e The package genesis-drop-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49068 Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49066 Malicious code in wm-tests-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 121558d6ec677ddacd0f0a5568a855ebf1afa527ad4e25ad97ab770b89ba16fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48928 Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in energy-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4830ca4abd86f26380368ac28f819b1c5a209bb67804a59ac916cab4f96099f6 The package energy-portal was found to contain malicious code. Source: ghsa-malware de4d4f73709d8cd24cf252de30a2c865264a7a804813494674c2a6cb15337c8e...

MAL-2025-48778 Malicious code in tailwind-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9212e51117e449a9e60cece9254daaa17a757088742195bf3c4396a0c5a8283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-42910

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

Debian dla-4331 : webext-https-everywhere - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4331 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4331-1 [email protected] https://www.debian.org/lts/security/...