8412 matches found
Arbitrary Code Execution(ACE)
Expr-eval is vulnerable to Arbitrary Code ExecutionACE. The vulnerability is due to insufficient input validation in the evaluate function, which allows an attacker to supply a crafted variables object and execute arbitrary code...
CVE-2025-64726
Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...
EUVD-2025-177114
Malicious code in polaris-build-event-dotenv-parse-variables npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-175548
Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...
EUVD-2025-177646
Malicious code in neptunology-husky-dotenv-parse-variables-got npm...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-175920
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177713
Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy npm...
MAL-2025-188169 Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178139
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...
EUVD-2025-178493
Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...
EUVD-2025-179264
Malicious code in dotenv-parse-variables-init-child-process-genomics npm...
EUVD-2025-180461
Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...