Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198607

Malicious code in vue3-transpiler npm...

Malicious code in frontend-vue-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ecba1e4c2f32734e178b8a3697ed962053354867af75787af708f92f0da2474 package.json declares "preinstall": "node index.js", causing index.js to execute automatically on npm install. The script collects system identity...

EUVD-2025-38420

Malicious code in frontend-vue-next npm...

MAL-2025-49410 Malicious code in frontend-vue-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ecba1e4c2f32734e178b8a3697ed962053354867af75787af708f92f0da2474 package.json declares "preinstall": "node index.js", causing index.js to execute automatically on npm install. The script collects system identity...

EUVD-2025-37271

Malicious code in unplugin-vue-component npm...

Malicious code in vue2-script-ext-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747331ee9a0695a63f863ebc84ad9508b515a9c8dfe77477314ff8de5a5aba40 The package vue2-script-ext-html-webpack-plugin was found to contain malicious code...

MAL-2025-49275 Malicious code in unplugin-vue-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a902ee46a4ec13f75c9e5411ca04a3de1585cfb05faffe649dee54e798009 The package unplugin-vue-component was found to contain malicious code...

Malicious code in unplugin-vue-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a902ee46a4ec13f75c9e5411ca04a3de1585cfb05faffe649dee54e798009 The package unplugin-vue-component was found to contain malicious code...

CVE-2025-62798

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...

EUVD-2025-36569

Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax...

Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

A Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. This allowed attackers to inject arbitrary JavaScript or HTML that executes in the browser...

GHSA-9F58-4465-23C7 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

A Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. This allowed attackers to inject arbitrary JavaScript or HTML that executes in the browser...

CVE-2025-60354

Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the SharpShowTextField component when rendering user-supplied input containing Vue template syntax. An attacker can execute arbitrary JavaScript or inject malicious HTML by submitting specially crafted...

CVE-2025-62798

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...

CVE-2025-62798 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...

CVE-2025-62798 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...

CVE-2025-62798 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...