0xkobold (>=0.3.0, <=0.8.0), 4591-libs (>=0.0.1, <=0.2.0) +3782 more potentially affected by CVE-2026-82562 via qs (>=6.14.2, <=6.15.3)

qs NPM version =6.14.2, =0.3.0, =0.0.1, =0.1.1, =0.1.1, =0.0.1-alpha.29, =0.1.6-alpha.11, =0.0.1-alpha.20, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.5, =0.0.1, =1.0.0, =0.1.1, =0.1.18 and more Source cves: CVE-2026-82562 Source advisory: MEND:CVE-2026-82562...

WS-2019-0245

In sails-mysql, versions before v0.10.8 are vulnerable to SQL injection. The 'sort' keyword is not properly sanitizes and may allow attackers to inject SQL statements and execute arbitrary SQL queries...

adriannodejs (1.0.0), angular-resource-sails (>=1.1.8, <=1.1.10) +41 more potentially affected by unknown CVE via sails (0.11.5)

sails NPM version 0.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on sails and may be impacted: - adriannodejs 1.0.0 - angular-resource-sails =1.1.8, =0.0.0-semantic-release, =1.2.0, =0.0.0, =0.0.0, =1.0.0, =1.0.2, =2.1.5, =0.1.26, =0.0.27, =0.0.28...

EUVD-2025-176543

Malicious code in sails-rollup-unuk-xo npm...

EUVD-2025-177323

Malicious code in parcel-paleontology-configstore-sails npm...

EUVD-2025-178301

Malicious code in janus-remark-thuban-sails npm...

EUVD-2025-178465

Malicious code in hyperion-sails-accretion-multiverse npm...

EUVD-2025-175476

Malicious code in xml-sails-cluster-mysql npm...

Malicious code in sails-rollup-unuk-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33fd2b89cf4ed018cf7deea569ccd3b18d23b7b1f0990df18111c52130666ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178848

Malicious code in fornax-materialize-sails-dactyl npm...

EUVD-2025-176546

Malicious code in sails-europa-nextjs-version npm...

Malicious code in sails-link-update-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175454

Malicious code in yaml-cache-sails-jwt npm...

EUVD-2025-177326

Malicious code in parcel-farout-webdriver-manager-sails npm...

MAL-2025-188960 Malicious code in publish-vuepress-sails-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sails-development-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f009141574a4ca3a211c93ce3277437cc7eb9f1f2db531117da82598c90e901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176545

Malicious code in sails-link-update-glaciology npm...

Malicious code in xml-sails-cluster-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47d11e94efa1d8dcc50c9b7719f33a12c4ac87761659e74645fc502db56b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189328 Malicious code in sails-dotenv-adonis-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa31083ce72f58be06ef61827800200ffc7fb0df078a978047d564620b116b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-stop-sails-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fac81b336251a0f2225253fc52c78a5c8a042c98b17ae78f075da6345bd3740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...