5376 matches found
EUVD-2025-177802
Malicious code in miranda-native-cross-env-oauth npm...
EUVD-2025-180518
Malicious code in acamar-child-process-oauth-nodejs npm...
EUVD-2025-179167
Malicious code in element-ui-nconf-oauth-webpack npm...
EUVD-2025-177769
Malicious code in mongoose-docusaurus-fomalhaut-oauth npm...
EUVD-2025-176174
Malicious code in string-version-oauth-epimetheus npm...
EUVD-2025-175520
Malicious code in xanthus-fusion-oauth-halley npm...
EUVD-2025-178665
Malicious code in gravity-start-triton-oauth npm...
EUVD-2025-176843
Malicious code in quasar-oauth-perseus-prettier-plugin-markdown npm...
MAL-2025-186411 Malicious code in csrf-mutation-oauth-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Siemens RUGGEDCOM ROX, SIMATIC S7-1500 Improper Authentication (CVE-2022-22576)
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...
EUVD-2025-111581
Malicious code in loop-scripts-koa-oauth npm...
EUVD-2025-121270
Malicious code in thuban-oauth-graphql-colors npm...
EUVD-2025-124068
Malicious code in ophiuchus-yildun-centauri-oauth npm...
EUVD-2025-113306
Malicious code in ganymede-kronos-oauth-eslint-plugin npm...
Malicious code in rest-andromeda-ora-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oauth-barnard-resolvers-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea66277b18e096e1d2a0d7d62b31f94cb16b2d90a1da10ff12c28b7a3942e44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in orbit-native-dotenv-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...