294 matches found
salmon (0.2.0) potentially affected by CVE-2026-48587 via django (1.6.1)
django PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - salmon 0.2.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...
hypycube (0.0.0a0), pyflow-viz (>=0.14.0, <=0.15.0) +1 more potentially affected by CVE-2026-21883 via bokeh (2.0.1)
bokeh PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - hypycube 0.0.0a0 - pyflow-viz =0.14.0, =0.10.0rc4, =1.0.0rc7 Source cves: CVE-2026-21883 Source advisory: OSV:GHSA-793V-589G-574V...
EUVD-2025-117321
Malicious code in honest-salmon-tiger npm...
EUVD-2025-117194
Malicious code in odd-salmon-mastodon npm...
EUVD-2025-117304
Malicious code in increasing-salmon-wolf npm...
EUVD-2025-117236
Malicious code in mean-salmon-canidae npm...
EUVD-2025-117206
Malicious code in new-salmon-gamefowl npm...
MAL-2025-138781 Malicious code in honest-salmon-tiger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139110 Malicious code in weekly-salmon-fox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116992
Malicious code in weekly-salmon-fox npm...
EUVD-2025-117403
Malicious code in exact-salmon-minnow npm...
Malicious code in exact-salmon-minnow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7044b40d221b50f9cb6b01adeb01cb8e2115df9a991d7040b6ca26a60e4eb610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odd-salmon-mastodon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mean-salmon-canidae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117365
Malicious code in fresh-salmon-aardwolf npm...
EUVD-2025-117461
Malicious code in cuddly-salmon-jellyfish npm...
EUVD-2025-117277
Malicious code in key-salmon-chameleon npm...
EUVD-2025-117208
Malicious code in net-salmon-stingray npm...
Malicious code in honest-salmon-tiger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...