HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

EUVD-2025-121922

Malicious code in slidev-cypress-blaze-upgrade npm...

Malicious code in slidev-cypress-blaze-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e0f7b3a54e7c3268f82dcb5c3e36d3c579c795e7da849d6bd79a75b57b653f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...