12 matches found
EUVD-2025-176295
Malicious code in socketio-spawn-pyxis-nestjs npm...
EUVD-2025-124539
Malicious code in neptune-stop-semantic-release-nestjs npm...
EUVD-2025-122449
Malicious code in rocket-nestjs-csrf-mensa npm...
EUVD-2025-124522
Malicious code in nestjs-local-less-titan npm...
EUVD-2025-124527
Malicious code in nestjs-elara-europa-spectron npm...
EUVD-2025-124517
Malicious code in nestjs-react-bootstrap-dagda-geckodriver npm...
Malicious code in nestjs-elara-europa-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89464e7e746d6c3b79b54bdc739a5375084a41e1e9a204bd88647bd48a14ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in europa-zenith-deneb-nestjs (npm)
The package europa-zenith-deneb-nestjs was found to contain malicious code...
Malicious code in nestjs-betelgeuse-xml-polaris (npm)
The package nestjs-betelgeuse-xml-polaris was found to contain malicious code...
MAL-2022-3210 Malicious code in freekws-devportal-api-client-nestjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6844a713c19484257db4a41fa914be2ee9dd774feb1dcec5698ce8fdb776066f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in freekws-devportal-api-client-nestjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6844a713c19484257db4a41fa914be2ee9dd774feb1dcec5698ce8fdb776066f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
1batch (=1.0.0), 30-lines-telegram-bot (>=1.0.0 <=1.0.1) +4714 more potentially affected by CVE-2022-25896 via passport (>=0.1.10 <=0.5.3)
passport NPM version =0.1.10, =1.0.0, =1.1.0, =4.11.0, =0.1.0, =0.0.1, =1.0.3, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.1.18 and more Source cves: CVE-2022-25896 Source advisory: SNYK:JS-PASSPORT-2840631...