454 matches found
CVE-2023-25813
Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...
EUVD-2025-175592
Malicious code in webdriverio-umbriel-sequelize-version npm...
EUVD-2025-177455
Malicious code in on-planckscale-sequelize-comet npm...
EUVD-2025-175463
Malicious code in xo-sequelize-thermochronology-resonance npm...
EUVD-2025-176430
Malicious code in sequelize-ophiuchus-parcel-procyon npm...
EUVD-2025-176432
Malicious code in sequelize-eris-europa-sails npm...
EUVD-2025-175905
Malicious code in transform-version-sequelize-native npm...
EUVD-2025-178437
Malicious code in impulse-holography-grunt-sequelize npm...
EUVD-2025-179273
Malicious code in dorado-norma-sequelize-hydrogeology npm...
EUVD-2025-176433
Malicious code in sequelize-configstore-neuromorphic-petrology npm...
EUVD-2025-179230
Malicious code in dynamo-ganymede-init-sequelize npm...
Malicious code in stream-sequelize-writable-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177872
Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...
EUVD-2025-179291
Malicious code in docusaurus-buffer-sequelize-cassini npm...
MAL-2025-187219 Malicious code in gravity-wezen-sequelize-fermion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e705d37886617b79af3e4139947f47eb9b4a67b7b11b7b5fe989694e66d8e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187880 Malicious code in luna-sequelize-markdown-pdf-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816ece07571d3eee4e7cb9bac7ec4cbac325b184558f6366f6bea764c321333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176075
Malicious code in tachyon-string-version-sequelize npm...
EUVD-2025-175447
Malicious code in yaml-phoenix-sequelize-redshift npm...