EUVD-2025-123417

Malicious code in prettier-stop-query-indus npm...

EUVD-2025-114100

Malicious code in eleventy-query-xanadu-heka npm...

EUVD-2025-122948

Malicious code in query-nconf-jekyll-chai npm...

EUVD-2025-122965

Malicious code in quasar-query-mongoose-alphard npm...

Malicious code in canopus-proxima-orbit-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e186216f85d63256fefaad2eb59f9195d58954971b2eab47d48a84c3dfb5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122938

Malicious code in query-webdriver-mocha-version-shelljs npm...

EUVD-2025-111535

Malicious code in luna-query-hyperion-hyperion npm...

EUVD-2025-122937

Malicious code in query-wezen-ophiuchus-nightwatch npm...

EUVD-2025-111698

Malicious code in link-non-blocking-query-canopus npm...

EUVD-2025-122952

Malicious code in query-lint-dione-cross-env npm...

MAL-2025-143864 Malicious code in jasmine-query-yildun-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f632a3252972241dee863dd75f02b97f510ad5c332e9f6ff8b2dcb5eb89a139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-lint-dione-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cce3fbcf9f2f080f5429ac6cdfde30ab50eab69ed68d84c2d663dae5bbb661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145778 Malicious code in octans-release-it-carina-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b65c20fbd5e2fe8d1a71298ca00870d815cd43e9e5cb9994d32666f2c406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146982 Malicious code in query-ultra-foundation-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c34a8bb4f140d8b1c22dc64d5bd563c9a1e102e0768876da83550b8f89365f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140369 Malicious code in canopus-proxima-orbit-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e186216f85d63256fefaad2eb59f9195d58954971b2eab47d48a84c3dfb5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46732

Name of the Vulnerable Software and Affected Versions Epson Stylus SX510W affected versions not specified Description The embedded web management service in the Epson Stylus SX510W does not correctly process consecutive ampersand characters within query parameters when accessing the...

PT-2025-46577

Name of the Vulnerable Software and Affected Versions ViewLead Technology Bacteriology Laboratory Reporting System affected versions not specified Description The Bacteriology Laboratory Reporting System allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially enablin...

WellSky Harmony 安全漏洞

WellSky Harmony is an all-in-one service management platform from WellSky USA. A security vulnerability exists in WellSky Harmony version 4.1.0.2.83, which stems from improper cleanup of the TXTUSERID parameter in the xmHarmony.asp endpoint, which could lead to an SQL injection attack...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...