137738 matches found
EUVD-2025-197614
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...
EUVD-2025-180550
Malicious code in loger-parser npm...
Malicious code in loger-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...
EUVD-2025-180551
Malicious code in tailwindcss-setflex npm...
EUVD-2025-180554
Malicious code in chai-test-async npm...
EUVD-2025-177180
Malicious code in com.unity.polyspatial npm...
Malicious code in form-classifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...
EUVD-2025-175356
Malicious code in bitsight npm...
EUVD-2025-175355
Malicious code in form-classifier npm...
Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort. "The packages were systematically published over an extended period, flooding the npm...
Malicious code in @walletify/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47d10b25587929b2987efd39df23877c3753147c431eb456cef63e175e70588c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-175385
Malicious code in @walletify/ui npm...
EUVD-2025-175384
Malicious code in @walletify/backend npm...
EUVD-2025-175386
Malicious code in @walletify/core npm...
Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814d9c5cb9e62fb3014607e0cc8e6b132834d0f216d57d6a055d9aba26c110d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179578
Malicious code in cordelia-babel-on-proxima npm...
EUVD-2025-178204
Malicious code in kernel-stack-grep-zero-table npm...
EUVD-2025-178696
Malicious code in global-sadr-polaris-scorpius npm...
Malicious code in blazar-draco-mesosphere-mineralogy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a01697c106728258ab384897041a77198e1d8de26e461f241a9937d74f833c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...