5743 matches found
Prototype Pollution
json-schema-editor-visual is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the setData and deleteData functions, which allows an attacker to supply a crafted payload to inject or delete properties on Object.prototype, potentially...
Malicious code in palynology-cybernetics-schema-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb449bb955da5853cbd3c10edec33c18b47b924c86c52bd0f4d8d627cbc741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chai-schema-plutology-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1af430a378f890314e0bea7438fcf10fcaf30c0fc8e9081257df836dd6841a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dynamo-schema-higgs-geoarchaeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea29699a4255f978ebc4feb2e45e81710950a299da4f1af155fa329cbc775c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rocket-polaris-prettier-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188579 Malicious code in passport-pino-library-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dfd1dca0c0311db7a37091bd349a0f55ebe17608d41fa2a8f2117a71407312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189264 Malicious code in rocket-polaris-prettier-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186747 Malicious code in enif-axios-schema-biotechnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1aa20538098eb6552d01fad1a88faa22ff2b7e24c3c19f05a7101d9ebbf5dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189321 Malicious code in sagitta-schema-release-it-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175968
Malicious code in tethys-schema-proteomics-nuxtjs npm...
EUVD-2025-177437
Malicious code in ophiuchus-vuetify-schema-ursa npm...
EUVD-2025-177372
Malicious code in paleoclimatology-hydra-schema-genomics npm...
EUVD-2025-177303
Malicious code in passport-pino-library-schema npm...
EUVD-2025-176974
Malicious code in protractor-nightwatch-schema-bootstrap npm...
EUVD-2025-176874
Malicious code in quantum-darkmatter-native-schema npm...
EUVD-2025-176611
Malicious code in rocket-polaris-prettier-schema npm...
EUVD-2025-176554
Malicious code in sagitta-schema-release-it-husky npm...
EUVD-2025-176502
Malicious code in schema-bunyan-magnetar-bootstrap npm...