10886 matches found
MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Siemens SIMATIC S7-1500 Improper Neutralization of Special Elements used in an SQL Command (CVE-2022-29155)
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping...
squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling
A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...
EUVD-2025-116215
Malicious code in backend-foundation-prettier-fornax npm...
Malicious code in backend-venus-server-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d008aa9a3805893a743ea6743370aa37617a06e73ea348356ef209c9bf106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightmare-backend-babel-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91103deb94c614fbd1a4df900ba457667e63c12a896906cbb59532aa2c131aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123096
Malicious code in pulsar-astro-backend-xenon npm...
EUVD-2025-116205
Malicious code in backend-venus-server-indus npm...
EUVD-2025-113770
Malicious code in exec-fusion-backend-corvus npm...
EUVD-2025-116222
Malicious code in backend-chariklo-bellatrix-start npm...
EUVD-2025-120839
Malicious code in vega-gatsby-backend-standard npm...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
EUVD-2025-116607
Malicious code in apollo-backend-callback-cordelia npm...
EUVD-2025-124615
Malicious code in nconf-backend-comet-phoenix npm...
EUVD-2025-111242
Malicious code in metalsmith-cluster-epimetheus-backend npm...
EUVD-2025-123445
Malicious code in prettier-plugin-markdown-backend-hyperion-vortex npm...
Malicious code in karma-gridsome-backend-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113029
Malicious code in grus-backend-webdriver-mocha-transform npm...