EUVD-2025-176879

Malicious code in quantum-computing-frontend-halley-xml npm...

EUVD-2025-179430

Malicious code in cypress-vuetify-mutation-hermes npm...

EUVD-2025-177397

Malicious code in oscillation-oscillation-accretion-comet npm...

CVE-2025-13075

creationtimestamp| type| source ---|---|--- 2025-11-13 01:06:15+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hxxeegajh2 2025-11-13 03:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i7mvj22l2k...

EUVD-2025-137844

Malicious code in flights-tuiga-alukauavza npm...

EUVD-2025-137903

Malicious code in flights-lutuig-alonalia npm...

EUVD-2025-138070

Malicious code in flights-ilutg-idauma npm...

EUVD-2025-136424

Malicious code in itale-adci-akontolbapakmuullfi npm...

EUVD-2025-136466

Malicious code in itale-adci- npm...

EUVD-2025-138278

Malicious code in avangi-oliutka-tamaiki npm...

EUVD-2025-138007

Malicious code in flights-lutg-odli npm...

EUVD-2025-137616

Malicious code in gociay-unga-fugga npm...

EUVD-2025-132727

Malicious code in @akunsansan0/susu2 npm...

sudo-rs: Partial password reveal is possible after timeout

Summary If a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered are echoed back to the console. Example Using sudo-rs: geiger@cerberus:$ sudo -s sudo: authenticate Password: sudo-rs:...

EUVD-2025-133785

Malicious code in teate-thy-py-cape npm...

EUVD-2025-133685

Malicious code in teate-thy-py-rakow npm...

EUVD-2025-133474

Malicious code in teate-thy-sonic-buok npm...

EUVD-2025-132380

Malicious code in teate-thy-sonic-otaji npm...

EUVD-2025-134760

Malicious code in anais-papimoa-yamiog npm...

Malicious code in teate-thy-sonic-enewiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6476e70fe779379f0cef8b4997e6c37537555d44e9e4168f770817d620cc226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...