2510 matches found
EUVD-2025-201390
Malicious code in dotnetenv npm...
EUVD-2025-201086
Malicious code in elf-stats-caroling-mailbag-397 npm...
Arbitrary Code Injection
Overview react-server-dom-turbopack is a React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsafe...
EUVD-2025-200905
Malicious code in elf-stats-fuzzy-ornament-236 npm...
MAL-2025-192117 Malicious code in elf-stats-piney-icicle-501 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a81a39f19f3396146e10e967bf8fc434051ecba699f80b5292cba89921d877 The package elf-stats-piney-icicle-501 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-200760
Malicious code in elf-stats-whimsical-rocket-922 npm...
EUVD-2025-200196
Malicious code in multer-cli npm...
EUVD-2025-199133
Malicious code in @tiaanduplessis/json npm...
EUVD-2025-199212
Malicious code in formik-store npm...
EUVD-2025-199024
Malicious code in tcsp-draw-test npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198953
Malicious code in @mparpaillon/page npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
