5353 matches found
CVE-2025-64754
Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...
EUVD-2025-177941
Malicious code in materialize-docusaurus-oauth-centaurus npm...
Malicious code in sqlite-oauth-quito-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in acamar-child-process-oauth-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf9405e1356b230c3b5e02f074df3b4d1c15deed220a1ee0fa696389b7d321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177503
Malicious code in oauth-zenobia-mechatronics-sirius npm...
EUVD-2025-178708
Malicious code in glaciology-wormhole-cz-conventional-changelog-oauth npm...
EUVD-2025-177312
Malicious code in parsec-oauth-jsonp-eslint-config npm...
EUVD-2025-179664
Malicious code in comet-oauth-airbnb-tethys npm...
Malicious code in comet-oauth-airbnb-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9fb8279f61223224e9fbdc329b569ad93d0e71610a041f12d1cb85156c9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177504
Malicious code in oauth-neptunology-lint-server npm...
MAL-2025-188570 Malicious code in parsec-oauth-jsonp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xanthus-fusion-oauth-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parsec-oauth-jsonp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178701
Malicious code in global-gridsome-oauth-supervisor npm...
EUVD-2025-176240
Malicious code in sqlite-oauth-quito-graphql npm...
MAL-2025-189032 Malicious code in quasar-oauth-perseus-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28472317cdb1fc5348cf5966fda3fd7258b958bfe4a734759408ca8b0ede0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187217 Malicious code in gravity-start-triton-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dc11358c2821d460c58ed1e3be419761bd92b3c1d007e566b84d52e38f4132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177802
Malicious code in miranda-native-cross-env-oauth npm...