2333 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in @darwinex/react-custom-scrollbars (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c14e6f6b8558a92600a6b705cd18fbcfc9eca9a163fcd69c792492154fbe37e The package @darwinex/react-custom-scrollbars was found to contain malicious code...
Malicious code in @grumpycoffeecup/hello-npm-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a093b0e1fa1064f7696cf7ea0b583ffaf5470026f8c5da1613204168b33b09ed The package @grumpycoffeecup/hello-npm-world was found to contain malicious code. Source: ghsa-malware...
CVE-2025-13228
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
EUVD-2025-178006
Malicious code in luminescence-pino-superagent-axios npm...
EUVD-2025-179129
Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver npm...
EUVD-2025-180221
Malicious code in auth0-sociobiology-apollo-umbra npm...
EUVD-2025-176960
Malicious code in proxima-neptune-altair-neptune npm...
EUVD-2025-175555
Malicious code in whitedwarf-tectonic-izar-hermes npm...
MAL-2025-189114 Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf33e7a660e7f12a243bf4ae70b1401a0f4b66ec86a8c2aa5e877f46d3750826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177019
Malicious code in promise-dog-link-authorize-boolean npm...
EUVD-2025-179798
Malicious code in chai-schema-plutology-eclipse npm...
EUVD-2025-175625
Malicious code in wavefunction-procyon-archaeoastronomy-uranology npm...
Malicious code in prosthetics-janus-cosmicray-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf23841069f26bd310036a3ee4214cbe31bba389517fbaaf7c661280e69a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178287
Malicious code in java-theta-theta-zero-static npm...
EUVD-2025-177031
Malicious code in procyon-json-dynamo-neutrino npm...
MAL-2025-185420 Malicious code in aldebaran-quantum-babel-steganography (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e432f722c7db5ff51f734dd2a1307f770c81673653a4f35fc65218ea770c1f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...