137738 matches found
K000157932: NPM vulnerabilities CVE-2025-59037, CVE-2025-59038, and CVE-2025-59039
Security Advisory Description CVE-2025-59037 DuckDB is an analytical in-process SQL database management system. On 08 September 2025, the DuckDB distribution for Node.js on npm was compromised with malware along with several other packages. An attacker published new versions of four of DuckDB's...
MAL-2025-190600 Malicious code in optly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0772e230f188de88a82becfa6493f2c39c36e63290339595308366a84154a56 The package optly was found to contain malicious code. Source: ossf-package-analysis e70192025ea0e8c030d0adbe15f6c3272271f3b25cb13eedfb8136da48c9a29a...
EUVD-2025-198435
Malicious code in optly npm...
EUVD-2025-198376
Malicious code in @vreden-team/baileys npm...
EUVD-2025-198322
Malicious code in @ra-ide/extension-ui npm...
Malicious code in @ra-ide/system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce07a8994cd7d28965c3fdec8cba35203da851f19964d8ae6e2be5f754a8132 The package @ra-ide/system was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198323
Malicious code in @ra-ide/system npm...
Malicious code in @ra-ide/logix-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190593 Malicious code in @ra-ide/logix-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198325
Malicious code in @ra-ide/source-code-frontend npm...
MAL-2025-190594 Malicious code in @ra-ide/source-code-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198326
Malicious code in @ra-ide/tag-editor-frontend npm...
Malicious code in @ra-ide/code-editor-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39784fd9275723725034c0f9fcb2df35d06963659572a3aeaccd51e3a5e07e61 The package @ra-ide/code-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198331
Malicious code in @ra-ftds/ra-flourish-design-tokens npm...
Malicious code in alicenpmpocpackage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724 The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190585 Malicious code in expertsvc-onboard-offboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df The package expertsvc-onboard-offboard was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198289
Malicious code in @kiwiiw/ez-lib npm...
EUVD-2025-198246
Malicious code in com.unity.polyspatial.xr npm...
Malicious Package
Overview just-a-calculator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...