236627 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-13204
npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue. Mitigation Mitigation for this issue is eithe...
MAL-2025-190929 Malicious code in @ensdomains/ccip-read-cf-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3f5e0ef4b518b71e371b472de64525c90fa98305becf54d8e15279e4d5d766 The package @ensdomains/ccip-read-cf-worker was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198975
Malicious code in @ensdomains/ccip-read-cf-worker npm...
Malicious code in @ensdomains/op-resolver-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def95ef69b4dd7da38ca7a697fb0eabff2ae2fe2eff4f31957254a207346bd0 The package @ensdomains/op-resolver-contracts was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198976
Malicious code in @ensdomains/op-resolver-contracts npm...
EUVD-2025-198977
Malicious code in @ensdomains/ens-test-env npm...
EUVD-2025-198978
Malicious code in @ensdomains/durin npm...
EUVD-2025-198979
Malicious code in @ensdomains/ens-contracts npm...
Malicious code in @mparpaillon/page (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc632dc769c1c17211f5a14d8e9f40217a70b214e5a367f0ab8fccc939332a1 The package @mparpaillon/page was found to contain malicious code...
Malicious code in @posthog/nextjs-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198936
Malicious code in @posthog/plugin-unduplicates npm...
Malicious code in @postman/pm-bin-macos-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9784306ff54e49967977f9fc58b5d335de3a19434cc7d7d277ee8097ef3079d The package @postman/pm-bin-macos-arm64 was found to contain malicious code. Source: google-open-source-security...
Malicious code in @postman/pm-bin-windows-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae17f856e11e19fc956689bbc3e88c8de0052e0ea1017d2048d92f20bfa91b The package @postman/pm-bin-windows-x64 was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198927
Malicious code in @posthog/variance-plugin npm...
Malicious code in @posthog/customerio-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5c661564ccb733d65528965f85302bd0153cc1e8a4e3807e67eb528d73cd55 The package @posthog/customerio-plugin was found to contain malicious code. Source: google-open-source-security...