EUVD-2025-51708

Malicious code in sufficient-crimson-roadrunner npm...

EUVD-2025-54608

Malicious code in energetic-chocolate-roadrunner npm...

Malicious code in energetic-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-silver-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021df74e18c3b6a8cdbaa59d60daae25620c6a1c6a0097d2fc0c0a54965bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56508

Malicious code in weeklyroadrunnerz3n npm...

MAL-2025-66132 Malicious code in weekly_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d206972bcd5fbbcde774b31415a35340d6fdefc93adce408159c9b507999de07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61853 Malicious code in amateur_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7059ca7c824b4f6a3a6951a4957562ce7af1db38b700d5893b84f2996ff510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9164c98cf0b7f0cfc9fe26fad02be77c013332f3f8b4cc4e2a330ec935e5d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60785

Malicious code in amateurroadrunnerz3n npm...

Malicious code in rational_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68681b9e0c14fa6e3dd6c86786d20b70f932d4e428ab5b0ad0099038ce42474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49525

Malicious code in rationalroadrunnerz3n npm...

EUVD-2025-49377

Malicious code in skilledroadrunnerz3n npm...

EUVD-2025-50242

Malicious code in explicitroadrunnerz3n npm...

EUVD-2025-49620

Malicious code in possibleroadrunnerz3n npm...

EUVD-2025-50496

Malicious code in contemporaryroadrunnerz3n npm...

EUVD-2025-50219

Malicious code in fancyroadrunnerz3n npm...

EUVD-2025-48450

Malicious code in casualroadrunnerz3n npm...

GHSA-G9PC-8G42-G6VQ RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...

de.skiptag.roadrunner:roadrunner-servlet (0.1), de.skiptag.roadrunner:roadrunner-spring (0.1) +8 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.skiptag.roadrunner:roadrunner-servlet 0.1 - de.skiptag.roadrunner:roadrunner-spring 0.1 -...