64 matches found
CVE-2020-26259
CVE-2020-26259 CVE-2020-26259: XStream1.4.14 es vulnerable a una eliminación arbitraria de archivos en el host local al realizar el unmarshalling, siempre que el proceso en ejecución tenga permisos suficientes. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml...
CVE-2026-13763
This CVE affects AWS Application Load Balancer (ALB) with AWS WAF enabled, where inconsistent interpretation of HTTP/2 requests can allow bypass of WAF body inspection when the request body is fragmented across frames, leading to partial inspection. Affected component: HTTP/2 ALB target groups; r...
MAL-2026-4188 Malicious code in @limebike/supreme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f65cdcb27200e24464982c0678d9dd556342d53886e4d5378da5d9c664fe1c7 Both preinstall and postinstall lifecycle hooks in package.json execute index.js, which collects the installer's hostname, non-internal network...
MAL-2026-3284 Malicious code in tinfoil-shops (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12060d7ba8ada1f0215277ed3936de1f8e9f03d47430fe816b634778291d7024 The package tinfoil-shops was found to contain malicious code. Source: ghsa-malware 5fafb06ed458abc37062e49cbd57b0e5c348dba7d88d1524ca5df198216d7326...
MAL-2025-190176 Malicious code in vite-chunk-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa857f9f07f371efc55f392a0fcf81beea9480a42476b38fe80cf496b37ba8d The package vite-chunk-master was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-102037
Malicious code in sufficientgiraffez3n npm...
EUVD-2025-94896
Malicious code in sufficientcondorz3n npm...
Malicious code in sufficient_unicorn-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e8f3aa3a328771793e9fa3cf90dc4990c0d2eec3eecab314e47b62975a372d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75509
Malicious code in sufficientunicorn-appteadev npm...
EUVD-2025-78169
Malicious code in sufficientlionz3n npm...
EUVD-2025-80380
Malicious code in sufficientelephant0xrequest npm...
EUVD-2025-84154
Malicious code in sufficientgullz3n npm...
Malicious code in sufficient_gull_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6ea908d41eb56887ba5a8dba715b9f37fc9699b9c2861fa5aa624935ed4dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-96862 Malicious code in sufficient_vicuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e62e634d802f12d7167c9e7befe4d10140ef56fb96c181b5d39dc0266015a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73428
Malicious code in sufficientvicunaz3n npm...
EUVD-2025-51705
Malicious code in sufficient-maroon-boar npm...
EUVD-2025-51706
Malicious code in sufficient-gray-roadrunner npm...
EUVD-2025-51704
Malicious code in sufficient-olive-mastodon npm...