EUVD-2025-175801

Malicious code in update-barnard-rigel-readable npm...

EUVD-2025-177754

Malicious code in morgan-readable-auriga-promise npm...

EUVD-2025-178490

Malicious code in husky-despina-readable-oscillation npm...

EUVD-2025-179424

Malicious code in cz-conventional-changelog-stop-readable-mutation npm...

EUVD-2025-176782

Malicious code in readable-commitizen-photon-gatsby npm...

EUVD-2025-176808

Malicious code in radioastronomy-readable-proxima-sadr npm...

EUVD-2025-175759

Malicious code in ursa-readable-astrophysics-wolf npm...

EUVD-2025-176778

Malicious code in readable-karma-xml-fusion npm...

EUVD-2025-176460

Malicious code in sedna-nova-readable-levels npm...

EUVD-2025-175426

Malicious code in zenobia-google-readable-paleobotany npm...

EUVD-2025-180259

Malicious code in async-readable-solis-leda npm...

CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run...

MAL-2025-149904 Malicious code in 4meme-readable-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...

Malicious code in 4meme-readable-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6d930ea2c0ad7b353677dfafdbe18356b2cb350a496f593dfd2a284b6ec3e The package 4meme-readable-stream was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-120001

Malicious code in 4meme-readable-stream npm...

EUVD-2025-111554

Malicious code in loopback-readable-meissa-miranda npm...

EUVD-2025-122924

Malicious code in quito-lynx-astro-readable npm...

EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114374

Malicious code in dotenv-parse-variables-readable-dactyl-dorado npm...