EUVD-2025-53898

Malicious code in husky-gold-bear npm...

EUVD-2025-53902

Malicious code in husky-amber-cod npm...

Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68752 Malicious code in husky-indigo-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495a320c292f8587f342df067537e16d0b2695342d9a8c15d2c298a51165da60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68750 Malicious code in husky-copper-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca17b8037d1bcccfa9c9737087b38ec401dcb8992a088bafdc814e2c252a303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53897

Malicious code in husky-indigo-dragonfly npm...

MAL-2025-68751 Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53899

Malicious code in husky-copper-dingo npm...

EUVD-2025-53900

Malicious code in husky-black-penguin npm...

EUVD-2025-53901

Malicious code in husky-apricot-walrus npm...

EUVD-2025-47213

Malicious code in huskymousez3n npm...

CVE-2025-11735

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

WordPress HUSKY plugin <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter vulnerability

Unauthenticated SQL Injection via phrase Parameter vulnerability discovered by LionTree in WordPress Plugin HUSKY versions = 1.3.7.1...

CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

CVE-2025-11735

The CVE refers to HUSKY – Products Filter Professional for WooCommerce (WordPress plugin) with a blind SQL Injection via the phrase parameter. Affected versions are all up to and including 1.3.7.1, caused by insufficient escaping and lack of proper query preparation, enabling unauthenticated atta...

CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

PT-2025-44087

Name of the Vulnerable Software and Affected Versions HUSKY – Products Filter Professional for WooCommerce plugin for WordPress versions up to and including 1.3.7.1 Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is susceptible to blind SQL Injection...

WordPress plugin HUSKY – Products Filter Professional SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists ...

Malicious Package

Overview husky-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...