9494 matches found
EUVD-2025-177842
Malicious code in middleware-fusion-gemini-rehype npm...
EUVD-2025-176165
Malicious code in subduction-middleware-javascript-supernova npm...
EUVD-2025-177844
Malicious code in middleware-css-loader-eigenstate-pavo npm...
EUVD-2025-175888
Malicious code in transport-semantic-release-cressida-middleware npm...
EUVD-2025-179048
Malicious code in eslint-config-geckodriver-algol-middleware npm...
EUVD-2025-177724
Malicious code in mysql-cassini-unuk-middleware npm...
EUVD-2025-177057
Malicious code in primatology-middleware-planckscale-install npm...
[SECURITY] Fedora 41 Update: rubygem-rack-2.2.21-1.fc41
Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a single...
Astro 代码问题漏洞
Astro is an Astro open source web framework for content-driven websites. A code issue vulnerability exists in Astro versions 2.16.0 through prior to 5.15.5, which stems from the unsafe use of the x-forwarded-proto and x-forwarded-port request headers, which could lead to middleware protection rou...
Malicious code in comet-gacrux-pm2-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-promise-vuetify-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in middleware-eslint-pavo-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d5177b0597023c87477f7e642b8c1decf833335903750003c50a01975616f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in middleware-jasmine-nightwatch-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111147
Malicious code in middleware-weywot-eslint-readable npm...
EUVD-2025-113638
Malicious code in figures-middleware-centaurus-init npm...
EUVD-2025-115232
Malicious code in comet-gacrux-pm2-middleware npm...
EUVD-2025-115443
Malicious code in changelog-concurrently-subscription-middleware npm...
EUVD-2025-115844
Malicious code in cache-aquarius-nodejs-middleware npm...