EUVD-2025-176500

Malicious code in schema-terser-prompts-rollup npm...

EUVD-2025-177869

Malicious code in meteor-bionics-schema-flare npm...

EUVD-2025-178695

Malicious code in global-schema-unuk-gemini npm...

EUVD-2025-178292

Malicious code in jasmine-metalsmith-schema-sirius npm...

EUVD-2025-178049

Malicious code in local-ariel-elara-schema npm...

EUVD-2025-179648

Malicious code in command-prettier-stylelint-server-schema npm...

EUVD-2025-179526

Malicious code in cosmology-schema-morgan-canopus npm...

EUVD-2025-179477

Malicious code in cryptography-webdriver-manager-schema-test npm...

EUVD-2025-179297

Malicious code in dione-cressida-schema-spectron npm...

EUVD-2025-179226

Malicious code in dynamo-schema-higgs-geoarchaeology npm...

EUVD-2025-179798

Malicious code in chai-schema-plutology-eclipse npm...

EUVD-2025-179785

Malicious code in chalk-mira-procyon-schema npm...

EUVD-2025-180489

Malicious code in aether-vuepress-gatsby-schema npm...

EUVD-2025-177342

Malicious code in palynology-cybernetics-schema-hapi npm...

EUVD-2025-179135

Malicious code in enif-axios-schema-biotechnology npm...

Malicious code in chalk-mira-procyon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0669f795188c9df9f20c3ef0e98834b88a8aa721162b82698be48039ae152568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178634

Malicious code in grus-schema-odin-library npm...

Malicious code in sagitta-schema-release-it-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...

GHSA-7CX5-254X-CGRQ Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...