EUVD-2025-197746

Malicious code in chai-proxify npm...

Malicious Package

Overview tailwind-styled-scrollbar is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-197735

Malicious code in tailwind-styled-scrollbar npm...

EUVD-2025-197732

Malicious code in com.mixpanel.unity npm...

EUVD-2025-197706

Malicious code in filifecycleserv-paypal npm...

CVE-2025-13204

The expr-eval and expr-eval-fork npm packages are vulnerable to Prototype Pollution due to improper handling of JavaScript prototype-based inheritance in the eval interface . An attacker with access to the express eval interface can exploit this flaw to achieve arbitrary code execution . This vul...

EUVD-2025-197614

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

Malicious code in loger-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...

EUVD-2025-180550

Malicious code in loger-parser npm...

Malicious Package

Overview loger-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-180551

Malicious code in tailwindcss-setflex npm...

Malicious Package

Overview tailwindcss-setflex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview chai-test-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-190494 Malicious code in chai-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f220c85ce9af5bc025f22e269aaaf3af1c5853df736bcbb97331229c06b1c32 The package chai-test-async was found to contain malicious code. Source: ghsa-malware 5b8f7387cfa3c737fbb688f651f56f2174c2e831df5ded826ec25d8b7dab1bc...

EUVD-2025-180554

Malicious code in chai-test-async npm...

EUVD-2025-177180

Malicious code in com.unity.polyspatial npm...

Malicious code in bitsight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899 The package bitsight was found to contain malicious code...

EUVD-2025-175355

Malicious code in form-classifier npm...

EUVD-2025-175356

Malicious code in bitsight npm...

Malicious code in form-classifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...