EUVD-2025-177851

Malicious code in meteor-paleoecology-mysql-middleware npm...

EUVD-2025-179048

Malicious code in eslint-config-geckodriver-algol-middleware npm...

EUVD-2025-111162

Malicious code in middleware-electron-builder-arcturus-lint npm...

EUVD-2025-111158

Malicious code in middleware-janus-perseus-weywot npm...

Malicious code in middleware-dorado-arcturus-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989b710e537fc775ad4d9598cd5612ba8e23149980fb376951978a776fda01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123416

Malicious code in prettier-stylelint-chai-sadr-middleware npm...

EUVD-2025-124106

Malicious code in ophiuchus-eris-wasat-middleware npm...

EUVD-2025-37117

Malicious code in epic-okta-express-middleware npm...

MAL-2025-46558 Malicious code in wasat-astrobiology-chariklo-middleware (npm)

The package wasat-astrobiology-chariklo-middleware was found to contain malicious code...

MAL-2025-45184 Malicious code in middleware-markdown-pdf-entanglement-relay (npm)

The package middleware-markdown-pdf-entanglement-relay was found to contain malicious code...

MAL-2025-39585 Malicious code in xanthus-writable-janus-middleware (npm)

The package xanthus-writable-janus-middleware was found to contain malicious code...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to arbitrary external sites by manipulating the Host header in HTTP requests. Remediation Upgrade github.com/go-chi/chi/middleware to version 5.2.2 or higher...