MAL-2025-50871 Malicious code in arif-tahu23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb268c31387197fb73a8df99157725867b3de7ea8487a46b7ad0438fc14b4b4c The package arif-tahu23-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

EUVD-2022-6180

Malicious code in bioql PyPI...

MAL-2023-6076 Malicious code in selfgamepipsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 403a594387a3a4a83a77a0ac1635a064453255fe06bd5fb81921c79ea8abbe2c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Design/Logic Flaw

semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by encodeURI...

CVE-2022-31051

CVE-2022-31051 affects the open‑source npm package semantic-release . The vulnerability causes concealed secrets to be disclosed when they contain characters that are not encoded by encodeURI , in contexts where pushing to the repository requires modifying the URL to inject credentials. Public re...

CVE-2022-31051 Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by encodeURI...

Updated nodejs packages fix security vulnerability

Under certain conditions, V8 may improperly expand memory allocations in the Zone::New function. This could potentially be used to cause a Denial of Service via buffer overflow or as a trigger for a remote code execution CVE-2016-1669. The primary npm registry has used HTTP bearer tokens to...