EUVD-2025-56424

Malicious code in xaver-mieayam61-sluey npm...

EUVD-2025-58812

Malicious code in kiki-semur83-sluey npm...

EUVD-2025-56244

Malicious code in yuni-taiwan6-sluey npm...

MAL-2025-63100 Malicious code in gilang-bakwan39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f59fa8c1be1d145376b9413d4645a840d547b68dedd8ea982489ffb5137d6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57929

Malicious code in oktafian-kupang78-sluey npm...

EUVD-2025-56152

Malicious code in zaki-takokak74-sluey npm...

EUVD-2025-57605

Malicious code in revolutionaryparakeetz3n npm...

EUVD-2025-59149

Malicious code in indah-sambel3-sluey npm...

EUVD-2025-57485

Malicious code in rina-takokak88-sluey npm...

EUVD-2025-56179

Malicious code in zaki-klipo56-sluey npm...

EUVD-2025-59471

Malicious code in gita-mangga62-sluey npm...

Malicious code in bayu-kue34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e202833aee7840e861b6855b1f74ba023eba5dac92aa48f7028169bd89892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60012

Malicious code in dono-tumis30-sluey npm...

EUVD-2025-56258

Malicious code in yuni-mendoan62-sluey npm...

EUVD-2025-56644

Malicious code in vina-gaplek44-sluey npm...

EUVD-2025-58363

Malicious code in maya-kue4-sluey npm...

CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....

EUVD-2025-50800

Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: High...

MAL-2025-61350 Malicious code in standard_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e68940bfc6075d22eb377a6ad96aa8b35a8ed23d77ad83860c82c7552e5bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60391 Malicious code in estimated_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10670c5c24ed726289fa851f32ed874eab9562bd4cddcadc88964b6671de3a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...