EUVD-2025-179686

Malicious code in cold-bad-theta-epsilon-route npm...

EUVD-2025-179093

Malicious code in epsilon-catch-cold-beta-new npm...

EUVD-2025-180439

Malicious code in analyze-boolean-pipe-import-epsilon npm...

EUVD-2025-179094

Malicious code in epsilon-beta-key-double-assert npm...

Malicious code in daemon-epsilon-hash-link-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247ea1f9679d0a4af4536122840c9b4be02d663783f7a7a4e4a006907deb9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175402

Malicious code in zero-epsilon-bash-cache-query npm...

EUVD-2025-178511

Malicious code in hot-thread-cold-fast-epsilon npm...

EUVD-2025-179092

Malicious code in epsilon-class-cluster-root-xml npm...

EUVD-2025-176758

Malicious code in refactor-cat-epsilon-interface-monitor npm...

EUVD-2025-176170

Malicious code in stub-scale-alpha-epsilon-optimize npm...

EUVD-2025-178938

Malicious code in fast-catch-notify-epsilon-new npm...

EUVD-2025-176695

Malicious code in report-epsilon-socket-beta-sudo npm...

EUVD-2025-175995

Malicious code in test-book-final-epsilon-char npm...

EUVD-2025-176376

Malicious code in simple-await-try-book-epsilon npm...

EUVD-2025-176213

Malicious code in static-stub-dog-epsilon-final npm...

EUVD-2025-176992

Malicious code in protected-link-fire-epsilon-await npm...

MAL-2025-188883 Malicious code in protected-link-fire-epsilon-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab478b43bda74c0140167d1dc967d77687ba6a6a9836e9a1a25e9125a4a44495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186790 Malicious code in epsilon-class-cluster-root-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803cee7f39b9a2ab6058d1cd3ae867eab62842ca33d4e97cb5e92576816dc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12461 Unprotected access to parts of the application in Epsilon RH by Grupo Castilla

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...

CVE-2025-12461

CVE-2025-12461 affects Grupo Castilla Epsilon RH. The issue allows an attacker to access the unprotected path …/epsilonnet/License/About.aspx and disclose license details and product configuration, including installed modules. The root cause is lack of access control on that path. Impact is infor...