Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

CVE-2025-65025 esm.sh CDN service has arbitrary file write via tarslip

esm.sh is a nobuild content delivery networkCDN for modern web development. Prior to version 136, the esm.sh CDN service is vulnerable to path traversal during NPM package tarball extraction. An attacker can craft a malicious NPM package containing specially crafted file paths e.g.,...

EUVD-2025-198146

Malicious code in alicenpmpackage13 npm...

EUVD-2025-198144

Malicious code in alicenpmpackage1 npm...

EUVD-2025-198131

Malicious code in react-svg-module npm...

EUVD-2025-198136

Malicious code in kc-next npm...

MAL-2025-190574 Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

esm.sh 路径遍历漏洞

esm.sh is a content distribution network open-sourced by esm.sh. A path traversal vulnerability exists in versions prior to esm.sh 136, which stems from path traversal during the decompression of NPM packages, and could lead to arbitrary file writes...

EUVD-2025-198096

Malicious code in captcha-paypal npm...

EUVD-2025-198097

Malicious code in security-testing-research22 npm...

Malicious code in tailwindcss-breezium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-197919

Malicious code in mongoose-odm npm...

EUVD-2025-197920

Malicious code in tailwindcss-setfavicon npm...

Malicious Package

Overview tailwindcss-setfavicon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in workingstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56b24eb6e9737f361dce6ec109a95d6329de8392f296067cdc01e7f6950ddd1 The package workingstealer was found to contain malicious code. Source: ghsa-malware a5fb745fd37fc6048377cf7a40be4da1bf4751d412c4601909747d7b4ee38bb0...

EUVD-2025-197922

Malicious code in workingstealer npm...

EUVD-2025-197924

Malicious code in finastealer npm...

Malicious Package

Overview 1libxmljs2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2025-197921

Malicious code in mystealer npm...

MAL-2025-190559 Malicious code in finastealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7bc3399f7c9533d933b6b0cfa2271b787007a591ab8bba88ee3c19c476e7d6 The package finastealer was found to contain malicious code. Source: ghsa-malware ae3d441979a14b8b5d0d5fed15f7ff3a0984d6cbb5a08a788485a0986c85def7 An...