MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140160 Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Frequency Diverse (FD)-RIS-Enhanced Covert Communications: Defense against Wiretapping Via Joint Distance-Angle Beamforming

In response to the security blind zone challenges faced by traditional reconfigurable intelligent surface RIS-aided covert communication CC systems, the joint distance-angle beamforming capability of frequency diverse RIS FD-RIS shows significant potential for addressing these limitations...

EUVD-2025-38297

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

UBUNTU-CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CKEditor 安全漏洞

CKEditor is an enterprise WYSIWYG editor from CKEditor open source. A security vulnerability exists in CKEditor version v46.1.0 and Angular version v18.0.0, which stems from reflective cross-site scripting and could lead to an attacker executing arbitrary code in a user's browser environment...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2025-61261

CVE-2025-61261 is a reflected XSS vulnerability affecting CKEditor 46.1.0 (CKEditor 5) when used with Angular 18.0.0. The issue enables an attacker-supplied payload to execute in the user’s browser context (impact: partial in some documents; CVSS 3.1 base score 5.4). Affected component is CKEdito...

PT-2025-45490

Name of the Vulnerable Software and Affected Versions CKeditor version 46.1.0 Angular version 18.0.0 Description A reflected cross-site scripting XSS issue exists that allows attackers to execute arbitrary code within a user’s browser. This is achieved by injecting a crafted payload. The...

CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

EUVD-2025-37549

Malicious code in capes-template-angular npm...

Malicious code in capes-template-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2 The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49332 Malicious code in capes-template-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2 The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis...