81 matches found
Malicious Package
Overview hermes-paleontology-taurus-wavefunction is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
CVE-2026-2258
Affected software: aardappel lobster up to 2025.4. Vulnerable component: WaveFunctionCollapse function in library dev/src/lobster/wfc.h. Issue causes memory corruption via local manipulation. Exploit has been published and may be used. A patch is available (commit c2047a33e1ac2c42ab7e8704b33f7ea5...
Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175409
Malicious code in zephyr-mongodb-wavefunction-pm2 npm...
EUVD-2025-175672
Malicious code in vulcan-astrobiology-wavefunction-delphinus npm...
EUVD-2025-175629
Malicious code in wavefunction-crust-interstellarmedium-bootstrap npm...
EUVD-2025-177484
Malicious code in odin-holography-wavefunction-webpack npm...
EUVD-2025-176862
Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...
EUVD-2025-176608
Malicious code in rollup-nova-wavefunction-rimraf npm...
EUVD-2025-179128
Malicious code in enif-wavefunction-phoebe-kastra npm...
EUVD-2025-180241
Malicious code in augmentedreality-version-wavefunction-spawn npm...
EUVD-2025-179692
Malicious code in cluster-wavefunction-subduction-transhumanism npm...
EUVD-2025-175590
Malicious code in webdriverio-wavefunction-publish-asteroid npm...
EUVD-2025-177794
Malicious code in mocha-eventhoriz-wavefunction-redshift npm...
EUVD-2025-175625
Malicious code in wavefunction-procyon-archaeoastronomy-uranology npm...
Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25aeb382914a3761927c689bda3eefcfcfc97e0a1a8d7b2dfbecea0ce3f3077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175627
Malicious code in wavefunction-parallax-jovian-jasmine npm...
EUVD-2025-179638
Malicious code in commitizen-singularitarianism-framework-wavefunction npm...