Lucene search
+L
GithubRecent

163867 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•9 views

Malicious code in linkedin-model (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-taurus-callisto-cygnus (npm)

Source: amazon-inspector 25b9bfa4225d4ead498760ec989c55bd57640a2242e9e99afb115d92ab40d5a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-ursa-nova-rimraf (npm)

Source: amazon-inspector d44d6e84b842283cf109ff27c3aac47525e74f91b0b9e53ef219fb4ccfa1c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-ui-i24n (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-umbra-spectron-tool (npm)

Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-ui-i20n (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-typeorm-nebula-eigenstate (npm)

Source: amazon-inspector 72fcd61b1ebbef2bb21f395e514ac614ffc611617ad7b96a4f87213510556a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-uglify-js-fermiparadox-auth (npm)

Source: amazon-inspector b06dca166a8b4d24c9ce17bffd59e25dd73bad52a682aa28c3d281a6d192b7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in linkedin-event (npm)

Source: ossf-package-analysis d3117b6de9634e8866bcc81a60b2d016dc3f6ad89a592ae3118460e5dacc6d31 The OpenSSF Package Analysis project identified 'linkedin-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linkedin-cache (npm)

Source: ossf-package-analysis 1ffe0720b3de5b326d3c21a92d61c09a1d9628d2c1402bcec1e868d5ec11ab3d The OpenSSF Package Analysis project identified 'linkedin-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linkedin-database (npm)

Source: ossf-package-analysis f5a820d4804bca16792c856bbc1762769849da5c71cfd50b5afa2bfe86b90b03 The OpenSSF Package Analysis project identified 'linkedin-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•9 views

Malicious code in link-user-awk-bundle-throw (npm)

Source: amazon-inspector 13af1c15269c3456ca5cec6d14a4862505a34f1cf9fcfb6c89f3e739db65abe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-gateway (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-sync (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-analytics (npm)

Source: ossf-package-analysis 6a93b00bc04ea5218384795d0a4ce28aef30047e797c5bfa33e15d2e7b799011 The OpenSSF Package Analysis project identified 'linkedin-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkatzju (npm)

The package linkatzju was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-jira (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-theta-float-class-balance (npm)

Source: amazon-inspector 0217fbc8ce82958f98e07fb84597a7fb29c01d324de938f4aca90bcef15b747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linkedin-checkout (npm)

Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-ui-i22n (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-stream-global-upgrade (npm)

Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linkedin-internal (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-payment (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in linkedin-db (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in link-upsilon-link-kappa-compress (npm)

Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linkedin-admin (npm)

Source: ossf-package-analysis 8001032baa9e57ffc08d11ae9dc0a51fb41ef1dbd5dad53d1a82d828eba3005e The OpenSSF Package Analysis project identified 'linkedin-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-sedna-paleomagnetism-npm (npm)

Source: amazon-inspector 89f83ee1bfae66dc7210489390d14334111a3890b2209f274fdf0e50672ecaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-nightwatch-aquarius-ora (npm)

Source: amazon-inspector 88a16ba622475028f46340ba10cf929865e0a4cb88b18410fd926a9315ccf622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-csrf-cressida-achernar (npm)

Source: amazon-inspector a03b5bb903e9590aaaa21b6b9e954bb7d9b7ff7cd16f69072646e6f56f766945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-babel-test-upgrade (npm)

Source: amazon-inspector 05c03bc6eb57af4be938384971609abf1c0bf21731f0b1d63ec7163677493ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-sails-promise-dynamo (npm)

Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-meissa-colors-nightmare (npm)

Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•10 views

Malicious code in link-radiometric-umbriel-uninstall (npm)

The package link-radiometric-umbriel-uninstall was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-celeste-tool-protractor (npm)

Source: amazon-inspector 2940880bf1d8c4a59946e40191d36c5f69ea5634131d16fbb222ce6b121f99b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in link-got-weywot-build (npm)

Source: amazon-inspector 75bd7b215496fa678437cacf6b90f5388e6db1775a5f0054b9ad223f441689ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-event-impulse-pulsar (npm)

Source: amazon-inspector 08389626df92b1fcdeabe89945975e7d53bd394ce6dc2274a95695a8d6b51b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-cat-fork-char-easy (npm)

Source: amazon-inspector 0c5ab55b4c3e29acb931e3d95408acd0a439484161dee1fdef22b993a7942071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-non-blocking-query-canopus (npm)

Source: amazon-inspector 18050694724859cb21693c298cd5f0703bb1202db7796da33e77871360b29659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-flare-loglevel-command (npm)

Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-cron-simulate-assert-log (npm)

Source: amazon-inspector e256837491141edc7c92e5b82e6fc342f0f94ba27253023fe34abb8a251812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-server-bootes-spawn (npm)

Source: amazon-inspector 894d34465a3ec1ff7358819afc22b394d012d592dc9c83c9cefc484eaf0ddc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-loopback-hydrogeology-gacrux (npm)

Source: amazon-inspector da395659e113c0159b3a1ffa62f95566815334d185057840f3d59b3c5e74e71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm)

Source: amazon-inspector 386846b5eb8ea17261166715d1b01f258c84fe3bd709898c4c45ac12b4038d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-jovian-sedna-heka (npm)

Source: amazon-inspector a4e11422ab4f0bb7873a8e3f4819ba7fd1b7e992231e1068d7521d05a91b9bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-cold-file-mock-info (npm)

Source: amazon-inspector 6b00633ef23678971f439a4d09b982591e85b2cf14df23a52dc20c721a6ebe3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•8 views

Malicious code in link-commitizen-warp-nightmare (npm)

Source: amazon-inspector 80280704368aa87f094d2f04e18b07477de4d692a0044fa8457033b9644fa439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-function-info-tree-sandbox (npm)

The package link-function-info-tree-sandbox was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-phoenix-jsonp-concurrently (npm)

The package link-phoenix-jsonp-concurrently was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-gravity-css-loader-arcturus (npm)

Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in link-ora-gatsby-babel (npm)

Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Total number of security vulnerabilities163867