MAL-2025-189929 Malicious code in throw-simple-old-export-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7fa0e7015572a5c0c2140d2bd0a0d6d2e85a91da0626aa234799986419d1f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175723

Malicious code in view-warn-bash-rain-old npm...

EUVD-2025-177218

Malicious code in phi-shell-old-old-pi npm...

EUVD-2025-176945

Malicious code in psi-monitor-old-hot-dog npm...

EUVD-2025-179689

Malicious code in code-code-old-reject-cat npm...

EUVD-2025-177532

Malicious code in notify-zero-abstract-old-dog npm...

EUVD-2025-179681

Malicious code in cold-old-monitor-zeta-process npm...

EUVD-2025-177478

Malicious code in old-decompress-scale-throw-user npm...

EUVD-2025-179591

Malicious code in container-encrypt-kappa-virtualize-old npm...

EUVD-2025-177885

Malicious code in meta-code-debug-key-old npm...

EUVD-2025-177477

Malicious code in old-export-class-cron-deploy npm...

CVE-2025-11560

The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it back in the page, leading to reflected cross-site scripting, which could be used against high-privilege users such as admins...

EUVD-2025-117193

Malicious code in old-bronze-bass npm...

SUSE CVE-2025-64183

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObjectStealAttrString of pyOpenEXRold.cpp...

MAL-2025-122400 Malicious code in old_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c8b1b2564e18800bff7f76109194410cfd22c8e7db0a052a7483e8e1001317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74405

Malicious code in oldnightingalelime-46 npm...

EUVD-2025-76134

Malicious code in oldhawk-smiletea npm...

EUVD-2025-76132

Malicious code in oldreptile-apptea npm...

MAL-2025-106716 Malicious code in old_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47530d23e2e79968cf5010200de1731fd9ca032bfb2b872f52361853ebb80399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...