WeKan 访问控制错误漏洞

WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained a security vulnerability related to access control. This vulnerability stemmed from improper handling of the file server/publications/cards.js component in Meteor Publication Handler, which...

PT-2026-6944

Name of the Vulnerable Software and Affected Versions Wekan versions up to 8.20 Description A flaw exists in Wekan that could allow information disclosure. This issue impacts an unspecified part of the server/publications/cards.js file within the Meteor Publication Handler component. The attack c...

CVE-2022-35246

A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat...

Malicious Package

Overview meteor-developer-oauth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

EUVD-2025-202364

Malicious code in meteor-developer-oauth npm...

MAL-2025-192412 Malicious code in meteor-developer-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150affd8ab309ef6631d484dbd5f086a709aaf97cae168d6a0a8a966327c32f4 The package meteor-developer-oauth was found to contain malicious code. Source: ghsa-malware...

Malicious code in meteor-developer-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150affd8ab309ef6631d484dbd5f086a709aaf97cae168d6a0a8a966327c32f4 The package meteor-developer-oauth was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199206

Malicious code in generator-meteor-stock npm...

Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191101 Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-176449

Malicious code in seismology-meteor-odin-galaxy npm...

EUVD-2025-179886

Malicious code in capella-biotechnology-meteor-start npm...

EUVD-2025-177867

Malicious code in meteor-cache-fomalhaut-winston npm...

EUVD-2025-178574

Malicious code in heka-puppeteer-phoebe-meteor npm...

EUVD-2025-177857

Malicious code in meteor-hadron-hermes-lint npm...

MAL-2025-187811 Malicious code in lint-remark-meteor-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7f5550866ab3d3fd105f2aae894229da93014e2557b2fd328e2703ba4f12a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178109

Malicious code in library-babel-meteor-kronos npm...

EUVD-2025-178071

Malicious code in lint-remark-meteor-neptune npm...

Malicious code in alphard-dynamo-antares-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548e58df085b49fb6b9511df3b11a9697aff3fa1dfec19601ea92bc5f247f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...