CVE-2025-41065: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability type in LUNA software v7.5.5.6. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by inyecting a malicious payload through the 'Edit Batch Name' function. THe payload is stored by the application and subsequently...

LUNA software 跨站脚本漏洞

LUNA software is a digital audio workstation developed by the British company LUNA. Version 7.5.5.6 of LUNA software contains a cross-site scripting vulnerability. This vulnerability stems from the improper handling of user input in the Edit Batch Name function, which may lead to storage-based...

PT-2026-5693

Name of the Vulnerable Software and Affected Versions LUNA software version 7.5.5.6 Description A stored Cross-Site Scripting XSS issue exists in LUNA software. This allows an attacker to execute JavaScript code in a victim’s browser by injecting a malicious payload through the 'Edit Batch Name'...

Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177642

Malicious code in nestjs-luna-meteor-despina npm...

EUVD-2025-177078

Malicious code in prettier-luna-mysql-stratosphere npm...

EUVD-2025-178185

Malicious code in koa-betelgeuse-luna-cassini npm...

EUVD-2025-178080

Malicious code in lint-antares-luna-nashira npm...

EUVD-2025-177563

Malicious code in node-sass-luna-ora-terser-webpack-plugin npm...

EUVD-2025-178004

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres npm...

MAL-2025-187877 Malicious code in luna-cordelia-blackhole-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4671bed4986784ce341d0ba6709ba439dfb5c96942dd8001c1ab0c963fb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179832

Malicious code in centauri-luna-cli-tethys npm...

EUVD-2025-177450

Malicious code in oortcloud-lint-weywot-luna npm...

EUVD-2025-177571

Malicious code in node-config-pulsar-buffer-luna npm...

EUVD-2025-179282

Malicious code in docusaurus-xml-proxima-luna npm...

Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178002

Malicious code in luna-sequelize-markdown-pdf-meissa npm...

EUVD-2025-175535

Malicious code in winston-tectonophysics-quito-luna npm...

Malicious code in docusaurus-xml-proxima-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4841cb7fbba4912212b6867a9ab9667021ec18b4781ff0fe00923b7377062a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-luna-indus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d865a656c770e023fe92f67cb64974da1cbe3fb0141834bfffd8c86df97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...