12895 matches found
EUVD-2025-59149
Malicious code in indah-sambel3-sluey npm...
EUVD-2025-56179
Malicious code in zaki-klipo56-sluey npm...
EUVD-2025-56424
Malicious code in xaver-mieayam61-sluey npm...
EUVD-2025-57605
Malicious code in revolutionaryparakeetz3n npm...
EUVD-2025-59471
Malicious code in gita-mangga62-sluey npm...
EUVD-2025-56244
Malicious code in yuni-taiwan6-sluey npm...
EUVD-2025-56258
Malicious code in yuni-mendoan62-sluey npm...
EUVD-2025-57485
Malicious code in rina-takokak88-sluey npm...
EUVD-2025-60012
Malicious code in dono-tumis30-sluey npm...
CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
EUVD-2025-50800
Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: High...
MAL-2025-61350 Malicious code in standard_pig_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e68940bfc6075d22eb377a6ad96aa8b35a8ed23d77ad83860c82c7552e5bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-60391 Malicious code in estimated_raven_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10670c5c24ed726289fa851f32ed874eab9562bd4cddcadc88964b6671de3a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in erwin-pecel48-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281c1e34611c759a2b0888fa8d34bf8d0e40f22336c5e4ff606e1daedefb805d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-45600
Malicious code in riana-asinan54-sukiwir npm...
EUVD-2025-44691
Malicious code in vida-jamblang45-sukiwir npm...
EUVD-2025-46023
Malicious code in ocha-sego72-sukiwir npm...
EUVD-2025-44606
Malicious code in voicelessmammalz3n npm...