Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51412

Malicious code in uncertain-sapphire-swordfish npm...

EUVD-2025-51413

Malicious code in uncertain-ivory-tiger npm...

EUVD-2025-51411

Malicious code in uncertain-turquoise-cockroach npm...

MAL-2025-71236 Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56845

Malicious code in uncertainbadgerz3n npm...

EUVD-2025-56844

Malicious code in uncertainhamsterz3n npm...

Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

MAL-2025-49092 Malicious code in typescriptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6082397917a827f5633f57e4e1ab18b29257f511ac05859c4c27d6b632fae026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-12207

A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed to the public and may...

MAL-2025-48420 Malicious code in curve-ui-kit-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb2012407c0ff7c7e2c1a915c8ad608d1b47a31f725b9a9e68d652ad55bfcc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48349 Malicious code in webpack-load-css-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fdf10edf9a7aa5d5eec0a8fea00190c4abb0beb6c3701a205d9d7527332e15c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-iocz0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad74b3db117b60fc0bbc25bfe553def04f2261766313c4b245c4c88c657d1573 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48139 Malicious code in redirect-a1jnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 144cd40316e9b75e61f4a806b5a17a3ad66d2668b1fe532dc5758a405b4cdf5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pb-digital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 399c96f79b4c7c55dd2c9b4ac41c7fa11d3d1cbf26fcc0e1dbb1b222937711eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48029 Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mccabe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb690e83db7bf325ed12d03f46975f5de59a5b5756e9ce05cf5072e95cb5852c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47829 Malicious code in node-notifications (npm)

The package node-notifications was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f537b45789bd1ad6fcec083716172d0230b37e04510ace80351a35ef51cf0a9 Any computer that has this package installed or running should be considered fully...