335 matches found
Malicious code in lepton-weywot-mira-pino-pretty (npm)
Source: amazon-inspector a1a6f9d66b6ec16e62056ff7cfe9f1e3211bb59ec315c9861d4881df2c50af75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-cache-soap-hexo (npm)
Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-async-archaeogenetics-exoplanet (npm)
Source: amazon-inspector 7f676584cd19d58d3daad93d526fe717b85cbea7fc7cfdbdf085a8c6a7d81fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-sociobiology-duplex-nestjs (npm)
Source: amazon-inspector 53d7a23c064d52e0b75afba8f89a8c5e52998fb724077b5ba6c337b416414e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-husky-phenomic-hermes (npm)
Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-xanthus-paleoanthropology-abiogenesis (npm)
Source: amazon-inspector 0f819ae12bffcff278cc70e29a906edd0faeb0ab3b65eca9831126320e7ead4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in kinetic-mongodb-lepton-rollup-plugin (npm)
The package kinetic-mongodb-lepton-rollup-plugin was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in iota-style-loader-lepton-cygnus (npm)
The package iota-style-loader-lepton-cygnus was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hydra-lepton-interstellarmedium-entanglement (npm)
Source: amazon-inspector 6a5b0751525d924128f7d8f3f75bc81175d9c822a4d589dc97dbc03ddd75c01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in helmet-lepton-baryon-gravitationalwave (npm)
The package helmet-lepton-baryon-gravitationalwave was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in deneb-warp-nucleosynthesis-lepton (npm)
Source: amazon-inspector 9e70719cc700229a9dd67dc10f095ef7a077cd2994062c4934645d61f181e602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis (npm)
Source: amazon-inspector 7deb0c94ebbbbdb091059c3ba19584ab4654ae5392ebc9f3b89e7bb345c09a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cassini-public-typeorm-lepton (npm)
The package cassini-public-typeorm-lepton was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in capella-lepton-mensa-phoebe (npm)
The package capella-lepton-mensa-phoebe was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in aether-start-lepton-mdx (npm)
Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
📄 Lepton CMS 7.4.0 Cross Site Scripting / Code Execution
Lepton CMS version 7.4.0 has a vulnerability which allows for a persistent cross site scripting payload to escalate into PHP execution through the droplet engine...
EUVD-2025-176126
Malicious code in supercluster-grus-non-blocking-lepton npm...