371 matches found
EUVD-2025-179390
Malicious code in data-omicron-static-quick-serialize npm...
Malicious code in serialize-quick-alpha-book-resolve (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a965104bed503baf5938acd3d4dda26b3d1e3317487000bed52dba4bc6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176332
Malicious code in slow-data-moon-object-serialize npm...
EUVD-2025-176425
Malicious code in serialize-cloud-key-array-secure npm...
EUVD-2025-178689
Malicious code in good-serialize-protected-tau-fast npm...
EUVD-2025-179509
Malicious code in cron-kappa-bash-serialize-beta npm...
EUVD-2025-176692
Malicious code in report-serialize-rho-public-file npm...
EUVD-2025-175449
Malicious code in yaml-kappa-integer-uglify-serialize npm...
EUVD-2025-178195
Malicious code in key-tree-cron-serialize-process npm...
Malicious code in sun-serialize-parse-validate-alert (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slow-data-moon-object-serialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c49854e181d4118e50a6f9910fd6b567e67cd382a7ff14982b0a228063d3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177779
Malicious code in module-serialize-fire-bash-mu npm...
EUVD-2025-176426
Malicious code in serialize-bash-authenticate-execute-cloud npm...
EUVD-2025-175637
Malicious code in water-balance-serialize-omicron-deploy npm...
EUVD-2025-176829
Malicious code in quick-serialize-small-bash-delta npm...
EUVD-2025-179619
Malicious code in compress-tau-enum-book-serialize npm...
EUVD-2025-179207
Malicious code in easy-serialize-omicron-mu-assert npm...
EUVD-2025-176423
Malicious code in serialize-final-beta-deserialize-await npm...
MAL-2025-189183 Malicious code in report-serialize-rho-public-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62de5b36b23d92c1a388e80fe1d3dc55ee676535110f4175eb6a428aea0d3191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by...