EUVD-2025-117078

Malicious code in sparkling-scarlet-cobra npm...

Malicious code in sparkling_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb106169e5a9ee05da355d6958b8f2b7f5122c1d02d389b68bbbee8f1a6c832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75579

Malicious code in sparklingwarbler-silentdev npm...

EUVD-2025-80489

Malicious code in sparklingrookreplicateautomation npm...

EUVD-2025-71350

Malicious code in sparklingporcupinez3n npm...

EUVD-2025-73594

Malicious code in sparklingsquidz3n npm...

EUVD-2025-73595

Malicious code in sparklinggullz3n npm...

EUVD-2025-73597

Malicious code in sparklingbonoborequirement npm...

EUVD-2025-51906

Malicious code in sparkling-apricot-asp npm...

EUVD-2025-51904

Malicious code in sparkling-turquoise-mastodon npm...

EUVD-2025-51908

Malicious code in sparkling-amethyst-gazelle npm...

EUVD-2025-51905

Malicious code in sparkling-black-salmon npm...

EUVD-2025-51907

Malicious code in sparkling-amethyst-lemming npm...

EUVD-2025-57224

Malicious code in sparklinggoatz3n npm...

EUVD-2025-57225

Malicious code in sparklingcockroachz3n npm...

EUVD-2025-45215

Malicious code in sparklingquailz3n npm...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3 <=1.2.10), ai.djl.spark:spark_2.12 (=0.29.0) +268 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0 <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 - bio.ferlab:obo-parser2.12 =1.3.1 and more Source cves: CVE-2025-55039 Source advisory:...

ai.h2o:sparkling-water-api-generation_2.11 (>=3.34.0.3-1-2.2 <=3.46.0.6-1-2.4), ai.h2o:sparkling-water-api-generation_2.12 (>=3.34.0.3-1-3.0 <=3.46.0.6-1-3.5) +9 more potentially affected by CVE-2024-10572 via ai.h2o:h2o-ext-xgboost (>=3.34.0.1 <=3.46.0.6)

ai.h2o:h2o-ext-xgboost MAVEN version =3.34.0.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.1-1-2.2, =3.34.0.1-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =2.0.0, =2.1.2 Source cves: CVE-2024-10572 Source advisory:...

ai.h2o:sparkling-water-api-generation_2.11 (>=3.34.0.3-1-2.2 <=3.46.0.1-1-2.4), ai.h2o:sparkling-water-api-generation_2.12 (>=3.34.0.3-1-3.0 <=3.46.0.1-1-3.5) +9 more potentially affected by CVE-2024-10572 via ai.h2o:h2o-ext-xgboost (>=3.34.0.1 <=3.46.0.1)

ai.h2o:h2o-ext-xgboost MAVEN version =3.34.0.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.1-1-2.2, =3.34.0.1-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =2.0.0, =2.1.1 Source cves: CVE-2024-10572 Source advisory:...

CVE-2024-13423

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparklingactivateplugin' and 'sparklingdeactivateplugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers...