5825 matches found
EUVD-2025-179745
Malicious code in chi-mu-socket-cold-small npm...
EUVD-2025-179216
Malicious code in earth-small-scale-simulate-static npm...
EUVD-2025-176222
Malicious code in star-earth-small-execute-decrypt npm...
EUVD-2025-179621
Malicious code in compile-xi-small-star-decompress npm...
EUVD-2025-176372
Malicious code in simulate-small-enum-protected-cluster npm...
MAL-2025-188122 Malicious code in moon-small-nu-rain-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcf2a1dc5076c624ca43163bb493e90fd98998b7c3805d3aa5c9f1f5817c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117088
Malicious code in small-aqua-alligator npm...
firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input 250 KiB can cause the parser to allocate hundreds of megabytes, leading to denial-of-service DoS through memory exhaustion...
EUVD-2025-88729
Malicious code in smallbasiliskz3n npm...
EUVD-2025-78292
Malicious code in smalldragonz3n npm...
MAL-2025-108851 Malicious code in small_dragon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c34b15d1bbde4cea5f0fc9472b5ba92555658368fea15363bc355054b59fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78290
Malicious code in smallviperz3n npm...
EUVD-2025-80532
Malicious code in smallkangaroodumbs npm...
Malicious code in small-green-gibbon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e5e68ce26b59441391645449ea685193e87b947b8b29a8094c04f1f17ccae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51967
Malicious code in small-green-gibbon npm...
EUVD-2025-51963
Malicious code in small-purple-iguana npm...
EUVD-2025-51965
Malicious code in small-magenta-whale npm...
EUVD-2025-51968
Malicious code in small-coffee-hamster npm...