12952 matches found
EUVD-2025-57485
Malicious code in rina-takokak88-sluey npm...
EUVD-2025-56258
Malicious code in yuni-mendoan62-sluey npm...
EUVD-2025-56644
Malicious code in vina-gaplek44-sluey npm...
EUVD-2025-59471
Malicious code in gita-mangga62-sluey npm...
EUVD-2025-60012
Malicious code in dono-tumis30-sluey npm...
EUVD-2025-56179
Malicious code in zaki-klipo56-sluey npm...
EUVD-2025-58363
Malicious code in maya-kue4-sluey npm...
Malicious code in bayu-kue34-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e202833aee7840e861b6855b1f74ba023eba5dac92aa48f7028169bd89892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
EUVD-2025-50800
Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: High...
MAL-2025-61350 Malicious code in standard_pig_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e68940bfc6075d22eb377a6ad96aa8b35a8ed23d77ad83860c82c7552e5bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-60391 Malicious code in estimated_raven_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10670c5c24ed726289fa851f32ed874eab9562bd4cddcadc88964b6671de3a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in erwin-pecel48-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281c1e34611c759a2b0888fa8d34bf8d0e40f22336c5e4ff606e1daedefb805d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-45600
Malicious code in riana-asinan54-sukiwir npm...
EUVD-2025-47871
Malicious code in erick-semur22-sukiwir npm...
EUVD-2025-47796
Malicious code in exuberantcamelz3n npm...
EUVD-2025-44606
Malicious code in voicelessmammalz3n npm...
EUVD-2025-48293
Malicious code in colorfulmockingbirdz3n npm...
MAL-2025-57279 Malicious code in kurniawan-sate23-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de5dd53b2d31eca50201628dfc69731157ebb424c6c870567bdafd1dd6edc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...