5204 matches found
BIT-PARSE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0, Parse...
EUVD-2025-123110
Malicious code in publish-schema-scorpius-shelljs npm...
EUVD-2025-123977
Malicious code in package-registry-restart-schema npm...
EUVD-2025-111337
Malicious code in mdx-schema-chai-foundation npm...
Malicious code in proxima-helmet-schema-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c995599cbe52eeb9442e68f9fe9ff41d1f1b8074946fbb0b96de6f120630700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122230
Malicious code in schema-dotenv-safe-europa-castor npm...
EUVD-2025-122225
Malicious code in schema-init-less-loader-cosmos npm...
EUVD-2025-116345
Malicious code in auth0-schema-nightwatch-hydra npm...
EUVD-2025-122510
Malicious code in reveal-md-hyperion-websockets-schema npm...
EUVD-2025-122338
Malicious code in sagitta-cache-cressida-schema npm...
EUVD-2025-122233
Malicious code in schema-corvus-bunyan-slidev npm...
EUVD-2025-122226
Malicious code in schema-init-cosmiconfig-postcss-loader npm...
EUVD-2025-122222
Malicious code in schema-websockets-loglevel-readable npm...
EUVD-2025-123844
Malicious code in perseus-colors-schema-enceladus npm...
EUVD-2025-123557
Malicious code in polaris-schema-browserify-capella npm...
EUVD-2025-123247
Malicious code in prompts-schema-lint-staged-dorado npm...
Malicious code in schema-husky-webpack-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bceb70b627909ce9080ae4c5ff12a8356a5b7935db28399e493cf3247a26bccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113115
Malicious code in graphql-chai-schema-elara npm...