137472 matches found
EUVD-2025-198136
Malicious code in kc-next npm...
MAL-2025-190574 Malicious code in kc-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...
esm.sh 路径遍历漏洞
esm.sh is a content distribution network open-sourced by esm.sh. A path traversal vulnerability exists in versions prior to esm.sh 136, which stems from path traversal during the decompression of NPM packages, and could lead to arbitrary file writes...
EUVD-2025-198096
Malicious code in captcha-paypal npm...
EUVD-2025-198097
Malicious code in security-testing-research22 npm...
Malicious code in tailwindcss-breezium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-197919
Malicious code in mongoose-odm npm...
Malicious Package
Overview tailwindcss-setfavicon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
EUVD-2025-197920
Malicious code in tailwindcss-setfavicon npm...
EUVD-2025-197922
Malicious code in workingstealer npm...
Malicious code in workingstealer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56b24eb6e9737f361dce6ec109a95d6329de8392f296067cdc01e7f6950ddd1 The package workingstealer was found to contain malicious code. Source: ghsa-malware a5fb745fd37fc6048377cf7a40be4da1bf4751d412c4601909747d7b4ee38bb0...
EUVD-2025-197924
Malicious code in finastealer npm...
Malicious Package
Overview 1libxmljs2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2025-197921
Malicious code in mystealer npm...
MAL-2025-190559 Malicious code in finastealer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7bc3399f7c9533d933b6b0cfa2271b787007a591ab8bba88ee3c19c476e7d6 The package finastealer was found to contain malicious code. Source: ghsa-malware ae3d441979a14b8b5d0d5fed15f7ff3a0984d6cbb5a08a788485a0986c85def7 An...
EUVD-2025-197905
Malicious code in chai-type npm...
Malicious Package
Overview crediteligibilityserv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-197906
Malicious code in pretty-jsonify npm...
MAL-2025-190554 Malicious code in pretty-jsonify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448c877af04a46d01d52e722de63fc0f986a877952bfc332c784d6b054b144ea The package pretty-jsonify was found to contain malicious code. Source: ghsa-malware 649213f861633958745285a1555fc21e61fa6cdc511641465cfa66e4317a7373...