138453 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue. Mitigation Mitigation for this issue is eithe...
MAL-2025-190929 Malicious code in @ensdomains/ccip-read-cf-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3f5e0ef4b518b71e371b472de64525c90fa98305becf54d8e15279e4d5d766 The package @ensdomains/ccip-read-cf-worker was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198976
Malicious code in @ensdomains/op-resolver-contracts npm...
EUVD-2025-198977
Malicious code in @ensdomains/ens-test-env npm...
EUVD-2025-198978
Malicious code in @ensdomains/durin npm...
EUVD-2025-198979
Malicious code in @ensdomains/ens-contracts npm...
EUVD-2025-198953
Malicious code in @mparpaillon/page npm...
Malicious code in zapier-platform-legacy-scripting-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90298308f4d64cfb41746e3f65bcdbae9f4d790f7db3034608ea5d520aa73cc The package zapier-platform-legacy-scripting-runner was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198908
Malicious code in @zapier/spectral-api-ruleset npm...
EUVD-2025-198911
Malicious code in @seung-ju/react-native-action-sheet npm...
Malicious code in @posthog/web-dev-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d0531931bec7f4add3b4f255b7f6572d28ff3edf2774f7d076fde394eb405 The package @posthog/web-dev-server was found to contain malicious code. Source: google-open-source-security...
Malicious code in @posthog/plugin-unduplicates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c908d2f59bb746353f63ff6561e3e99d8055d86ee72332228bfd40f24b8dad0 The package @posthog/plugin-unduplicates was found to contain malicious code. Source: google-open-source-security...
Malicious code in @postman/pm-bin-macos-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af6b141ac3ae548c7fadfe1523b270a35c69e8f5c20035f682e9ee726f1bdec The package @postman/pm-bin-macos-x64 was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198930
Malicious code in @posthog/twilio-plugin npm...