MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112150

Malicious code in json-backend-cluster-webdriverio npm...

MAL-2025-142956 Malicious code in google-backend-lyra-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b28cb62fe2a152557a0284558db91baf5657ae5209dfe3be3c536704defb5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116208

Malicious code in backend-phenomic-csrf-auriga npm...

Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116206

Malicious code in backend-ursa-achernar-react-bootstrap npm...

EUVD-2025-123998

Malicious code in package-avior-backend-release-it npm...

EUVD-2025-124493

Malicious code in nightmare-backend-babel-leda npm...

EUVD-2025-112394

Malicious code in iota-docusaurus-mdx-backend npm...

EUVD-2025-113445

Malicious code in foundation-backend-enif-async npm...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146017 Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139898 Malicious code in backend-wasat-ceres-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78977fc84c2e7c36ed3f9a84b4d2226faeeb53aeda92309a9ebf36bcdb7a06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

CVE-2025-56385

WellSky Harmony 4.1.0.2.83 has a SQL injection in the login endpoint xmHarmony.asp via the TXTUSERID parameter. The vulnerability arises from insufficient sanitization of user input before it is used in a SQL query, enabling authentication bypass, data leakage, or potential full compromise of bac...

EulerOS 2.0 SP12 : mod_http2 (EulerOS-SA-2025-2366)

According to the versions of the modhttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In certain proxy configurations, a denial of service attack againstApache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by...

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...