EUVD-2025-121178

Malicious code in tool-quark-andromeda-schema npm...

MAL-2025-141379 Malicious code in cygnus-schema-pino-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadfaf6400f24675483af5af45b3679d0f5854fdf0ffca88edf168e4aea9ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142866 Malicious code in geckodriver-hyperion-aurora-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298930ea874b7fae8089492be4a1a76825be6ba2b6aee39441fea337706f9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123012

Malicious code in quantum-mysql-schema-materialize npm...

EUVD-2025-114469

Malicious code in development-xo-pegasus-schema npm...

EUVD-2025-120836

Malicious code in vega-library-schema-parcel npm...

EUVD-2025-122228

Malicious code in schema-hermes-protractor-figures npm...

EUVD-2025-120742

Malicious code in vortex-phenomic-schema-blitz npm...

EUVD-2025-121346

Malicious code in test-schema-dione-leda npm...

EUVD-2025-121046

Malicious code in uglify-js-schema-spica-arcturus npm...

EUVD-2025-116262

Malicious code in axios-taurus-dependencies-schema npm...

EUVD-2025-114526

Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin npm...

EUVD-2025-122234

Malicious code in schema-arcturus-relay-hugo npm...

MAL-2025-139757 Malicious code in auth0-schema-nightwatch-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fb466e8ca9d678f6b37b895e5922e2d185b269f83992618d61b99e4e322732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141948 Malicious code in elektra-janus-slidev-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd73512e3aadd528cd97cbbaa58113bba30b99182291a7d47672ffc2db0e508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ThinkDashboard Cross-Site Scripting Vulnerability

ThinkDashboard is a lightweight, self-hosted bookmarking dashboard. A cross-site scripting vulnerability exists in ThinkDashboard version 0.6.7 and earlier, which stems from a lack of schema filtering and can be exploited by an attacker to cause a stored cross-site scripting attack...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the WriteRelationships function when the exclusion operator is used in the authorization schema and the server is configured with --write-relationships-max-updates-per-call greater...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the WriteRelationships function when the exclusion operator is used in the authorization schema and the server is configured with --write-relationships-max-updates-per-call greater...

CVE-2025-64502

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....