EUVD-2025-176187

Malicious code in stream-sequelize-writable-local npm...

EUVD-2025-175721

Malicious code in virgo-arcturus-hydra-stream npm...

EUVD-2025-179885

Malicious code in capella-cypress-stream-supernova npm...

EUVD-2025-178391

Malicious code in inquirer-stream-metabolomics-uninstall npm...

EUVD-2025-176198

Malicious code in stratigraphy-stream-module-deneb npm...

MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176189

Malicious code in stream-polaris-json-ursa npm...

MAL-2025-189686 Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178508

Malicious code in html-webpack-plugin-hologram-stream-install npm...

EUVD-2025-176186

Malicious code in stream-yildun-bootes-neutrino npm...

EUVD-2025-177444

Malicious code in ophiuchus-corvus-stream-deimos npm...

EUVD-2025-176094

Malicious code in supervisor-helios-stream-rate-limiter npm...

MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179583

Malicious code in convict-spawn-gravitationalwave-stream npm...

EUVD-2025-176193

Malicious code in stream-build-ganymede-corvus npm...

MAL-2025-187225 Malicious code in greatfilter-venus-stream-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2688ecd07f82607da45c4ce63b5e64aab9f8a5cd170454bb2ba16f0dbd1b5a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-janus-soap-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178657

Malicious code in greatfilter-venus-stream-halley npm...

EUVD-2025-177797

Malicious code in miranda-stream-resolvers-convict npm...

EUVD-2025-150370

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...