391 matches found
EUVD-2025-96441
Malicious code in misleadingjaguarz3n npm...
MAL-2025-113929 Malicious code in fauzi-klentik12-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80db6267da2e195df724056dc1f2233b2b9e8ac59c00b9ca3f7f6a5cfc569fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77566
Malicious code in misleadingbobcatgold-29 npm...
EUVD-2025-78789
Malicious code in misleadingcatfishz3n npm...
EUVD-2025-78788
Malicious code in misleadinglandfowlz3n npm...
Malicious code in misleading_sole_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42531bbc8399c1ceec43c4ef64390a01be34ac7528f58131cb95c19f0dd1b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53222
Malicious code in misleading-sapphire-sparrow npm...
EUVD-2025-53227
Malicious code in misleading-blue-caribou npm...
EUVD-2025-53228
Malicious code in misleading-aqua-ape npm...
MAL-2025-69426 Malicious code in misleading-peach-elk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699d8093b280fd77e9ab23f5eecb84e83982b414c10e097da67269ec65ee9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53224
Malicious code in misleading-jade-mockingbird npm...
EUVD-2025-53226
Malicious code in misleading-brown-rhinoceros npm...
EUVD-2025-53223
Malicious code in misleading-peach-elk npm...
EUVD-2025-53225
Malicious code in misleading-green-cephalopod npm...
EUVD-2025-53221
Malicious code in misleading-yellow-falcon npm...
Improper Neutralization
Overview Affected versions of this package are vulnerable to Improper Neutralization of user-supplied input in several fields, including repository descriptions, project names, git commit author names, commit messages, access token names, and webhook URLs. An attacker can inject malicious ANSI...
PT-2025-43454
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue in the Framework component exists where missing permission checks in multiple locations allow for a possible background activity launch. This can lead to local escalation of privileg...
Recorded Future Triage 安全漏洞
Recorded Future Triage is a cloud sandboxing service from US-based Recorded Future. A security vulnerability exists in Recorded Future Triage that stems from a Windows behavioral analysis engine that allows malicious samples to evade detection by recursively spawning a large number of child...