EUVD-2026-0730

Malicious code in tickncook-robot npm...

Malicious code in sturdyfetch21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba69196889e05381da2622501c31fa4d044353988973b496b124beccb6f8466 The package sturdyfetch21 was found to contain malicious code...

EUVD-2025-201910

Malicious code in chai-uuids npm...

CVE-2020-7973 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

EUVD-2025-201390

Malicious code in dotnetenv npm...

EUVD-2025-201086

Malicious code in elf-stats-caroling-mailbag-397 npm...

Arbitrary Code Injection

Overview react-server-dom-turbopack is a React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsafe...

EUVD-2025-200760

Malicious code in elf-stats-whimsical-rocket-922 npm...

MAL-2025-192117 Malicious code in elf-stats-piney-icicle-501 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a81a39f19f3396146e10e967bf8fc434051ecba699f80b5292cba89921d877 The package elf-stats-piney-icicle-501 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-200905

Malicious code in elf-stats-fuzzy-ornament-236 npm...

EUVD-2025-200196

Malicious code in multer-cli npm...

EUVD-2025-199133

Malicious code in @tiaanduplessis/json npm...

EUVD-2025-199212

Malicious code in formik-store npm...

EUVD-2025-199024

Malicious code in tcsp-draw-test npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198953

Malicious code in @mparpaillon/page npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...