MAL-2025-71714 Malicious code in yearning-tan-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50938

Malicious code in yearning-chocolate-cockroach npm...

EUVD-2025-50935

Malicious code in yearning-tan-goose npm...

EUVD-2025-50936

Malicious code in yearning-purple-stoat npm...

Malicious code in yearning-tan-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50937

Malicious code in yearning-olive-ant npm...

EUVD-2025-50939

Malicious code in yearning-aqua-pheasant npm...

EUVD-2025-50940

Malicious code in yearning-amber-skunk npm...

Malicious code in yearning_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06792b6d3c3015e0786739fcbcf5dde586ddeaec4dc51c04fadc64e7bf6b10b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48977

Malicious code in yearninglocustz3n npm...

Malicious code in yearning-uplift-vgv274-project (npm)

The package yearning-uplift-vgv274-project was found to contain malicious code...

Malicious code in yearning-verdant-jbs005-project (npm)

The package yearning-verdant-jbs005-project was found to contain malicious code...

MAL-2025-40411 Malicious code in yearning-verdant-jbs005-project (npm)

The package yearning-verdant-jbs005-project was found to contain malicious code...

MAL-2025-40410 Malicious code in yearning-uplift-vgv274-project (npm)

The package yearning-uplift-vgv274-project was found to contain malicious code...

Malicious code in yearning-maroon-raven (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

Directory traversal

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

CVE-2022-27043

Yearning has a Directory Traversal vulnerability (CVE-2022-27043) affecting multiple versions: 2.3.1, 2.3.2 (Interstellar GA) and 2.3.4–2.3.6 (Neptune). Unauthenticated attackers can read arbitrary files from the Yearning database management system. Remediation: update Yearning to a patched versi...