2171 matches found
EUVD-2025-179681
Malicious code in cold-old-monitor-zeta-process npm...
EUVD-2025-177218
Malicious code in phi-shell-old-old-pi npm...
EUVD-2025-177472
Malicious code in old-stub-xml-deploy-wind npm...
EUVD-2025-180009
Malicious code in book-good-old-sun-test npm...
EUVD-2025-177473
Malicious code in old-string-protected-omega-decode npm...
EUVD-2025-179591
Malicious code in container-encrypt-kappa-virtualize-old npm...
CVE-2025-11560
The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it back in the page, leading to reflected cross-site scripting, which could be used against high-privilege users such as admins...
EUVD-2025-117193
Malicious code in old-bronze-bass npm...
SUSE CVE-2025-64183
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp...
MAL-2025-122400 Malicious code in old_hawk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c8b1b2564e18800bff7f76109194410cfd22c8e7db0a052a7483e8e1001317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74405
Malicious code in oldnightingalelime-46 npm...
EUVD-2025-76132
Malicious code in oldreptile-apptea npm...
EUVD-2025-76134
Malicious code in oldhawk-smiletea npm...
MAL-2025-106718 Malicious code in old_reptile-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106716 Malicious code in old_hawk-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47530d23e2e79968cf5010200de1731fd9ca032bfb2b872f52361853ebb80399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in old_duck_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-62808
Malicious code in oldunicornz3n npm...
Malicious code in old_unicorn_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed7cb98b6b8f2a4a7ac4832448c129cc5163436cd80c31d7acd24f186b471e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-95744 Malicious code in old_carp_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6cef7141eba3a29814b1bd3ee560e1422a6608497b5e4cb9637dff60c1c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...