EUVD-2025-178883

Malicious code in float-beta-deploy-star-meta npm...

EUVD-2025-178381

Malicious code in integer-omega-virtualize-star-meta npm...

EUVD-2025-176379

Malicious code in signal-star-benchmark-report-small npm...

EUVD-2025-175483

Malicious code in xi-moon-star-fire-await npm...

EUVD-2025-176798

Malicious code in rain-theta-thread-star-simulate npm...

EUVD-2025-179217

Malicious code in earth-protected-gamma-test-star npm...

EUVD-2025-176220

Malicious code in star-private-minify-bad-compress npm...

EUVD-2025-176218

Malicious code in star-secure-alpha-omega-key npm...

EUVD-2025-175986

Malicious code in test-star-web-zeta-minify npm...

EUVD-2025-180078

Malicious code in big-star-kappa-alert-report npm...

EUVD-2025-179621

Malicious code in compile-xi-small-star-decompress npm...

EUVD-2025-176696

Malicious code in report-easy-fast-star-grep npm...

EUVD-2025-177464

Malicious code in omicron-final-fire-export-star npm...

EUVD-2025-176222

Malicious code in star-earth-small-execute-decrypt npm...

EUVD-2025-176219

Malicious code in star-route-query-export-process npm...

MAL-2025-189656 Malicious code in star-route-query-export-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175815

Malicious code in unix-zeta-star-execute-uglify npm...

EUVD-2025-179854

Malicious code in cat-big-code-star-encrypt npm...

Cross-site Scripting (XSS)

starcitizenwiki/embedvideo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper restriction of HTML attributes in the video embedding functionality, which allows an attacker to inject and execute arbitrary web scripts through crafted wikitext...

EUVD-2009-3168

Malware in sbrugna...