Malicious code in aurora-mjw1t-3dchp-glen-project (npm)

The package aurora-mjw1t-3dchp-glen-project was found to contain malicious code...

Malicious code in aurora_employee_assign (npm)

The package auroraemployeeassign was found to contain malicious code...

Malicious code in iota-aurora-dione-archaeometry (npm)

The package iota-aurora-dione-archaeometry was found to contain malicious code...

Malicious code in aquarius-pino-aurora-eridanus (npm)

The package aquarius-pino-aurora-eridanus was found to contain malicious code...

MAL-2025-15060 Malicious code in aurora-neuromorphic-paleoanthropology-weywot (npm)

The package aurora-neuromorphic-paleoanthropology-weywot was found to contain malicious code...

MAL-2025-19480 Malicious code in elektra-corvus-aurora-octans (npm)

The package elektra-corvus-aurora-octans was found to contain malicious code...

MAL-2025-15068 Malicious code in aurora_j6v3r_v93qi_cascade (npm)

The package auroraj6v3rv93qicascade was found to contain malicious code...

MAL-2025-30784 Malicious code in proxima-commitlint-commitizen-aurora (npm)

The package proxima-commitlint-commitizen-aurora was found to contain malicious code...

MAL-2025-19115 Malicious code in echo-5sp2s-tkxhc-aurora-project (npm)

The package echo-5sp2s-tkxhc-aurora-project was found to contain malicious code...

MAL-2025-15054 Malicious code in aurora-d0qet-qovh1-celestial-project (npm)

The package aurora-d0qet-qovh1-celestial-project was found to contain malicious code...

MAL-2025-14406 Malicious code in altair-prettier-stylelint-mdx-aurora (npm)

The package altair-prettier-stylelint-mdx-aurora was found to contain malicious code...

MAL-2025-18077 Malicious code in dawn-mcpqz-l4gbq-aurora-project (npm)

The package dawn-mcpqz-l4gbq-aurora-project was found to contain malicious code...

MAL-2025-15059 Malicious code in aurora-mjw1t-3dchp-glen-project (npm)

The package aurora-mjw1t-3dchp-glen-project was found to contain malicious code...

MAL-2025-14759 Malicious code in aquarius-pino-aurora-eridanus (npm)

The package aquarius-pino-aurora-eridanus was found to contain malicious code...

MAL-2025-15061 Malicious code in aurora-scribe (npm)

The package aurora-scribe was found to contain malicious code...

@0x18b2ee/parse-server (>=3.10.1 <=3.11.0), @514labs/aurora-mcp (>=0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939 <=0.0.64) +412 more potentially affected by CVE-2025-29744 via pg-promise (>=0.9.8 <=11.5.4)

pg-promise NPM version =0.9.8, =3.10.1, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.0, =1.1.2, =0.0.2, =0.0.3, =0.1.1, =9.3.8, =2.13.15, =2.0.0, =1.1.152, =1.0.1, =1.0.5, =1.0.10 and more Source cves: CVE-2025-29744 Source advisory: OSV:GHSA-FF9H-848C-4XFJ...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2021-26293

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files such as an executable file under the web root. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x...

CVE-2021-26294

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files such as a data/settings/settings.xml file containing admin panel credentials, as demonstrated by dav/server.php/files/personal/%2e%2e when using the...

CVE-2019-16238

Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login...