Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6907b6287280cdd51be770f95a0016abb5804f689916408a57db5104aff9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-elektra-europa-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbad3bcef8552d9ffedbf59cdda4c8d140d5c90b5855ac9c0ab6b25ad2da7c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142573 Malicious code in forever-proxima-node-config-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b732624153fce00320a627aa1ffdc3de2a3f8f88263b9a60c079022a0f486d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122070

Malicious code in semantic-ui-morgan-node-config-iota npm...

EUVD-2025-115828

Malicious code in cache-ophiuchus-node-config-browserify npm...

EUVD-2025-124446

Malicious code in nightwatch-node-config-node-config-scorpius npm...

Malicious code in nightwatch-node-config-node-config-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c474c424b69fafd765d12e27755c0381c66b0f348f254abc2bd4a1dc5aa1273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116792

Malicious code in algol-stream-node-config-enif npm...

EUVD-2025-112649

Malicious code in hyperion-aldebaran-node-config-cross-env npm...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

MAL-2025-142595 Malicious code in fork-publish-node-config-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f6e9a7562a333d4e73524c50d96a1a156c6d0d860a6af6a4cad3f0ea51e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2013-3963

Malware in sbrugna...

EUVD-2023-47972

Malicious code in bioql PyPI...

EUVD-2024-54370

Malicious code in bioql PyPI...

EUVD-2025-2153

Malicious code in bioql PyPI...

EUVD-2024-54371

Malicious code in bioql PyPI...

Malicious code in regulus-pegasus-lacerta-node-config (npm)

The package regulus-pegasus-lacerta-node-config was found to contain malicious code...

CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a SUB ZeroMQ socket and connect to an XPUB socket on the primary vLLM host. When data ...

CVE-2024-58132

In chainmaker-go aka ChainMaker before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic...

CVE-2024-58132

In chainmaker-go aka ChainMaker before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic...