Blitz Panel 安全漏洞

Blitz Panel is a comprehensive administration panel for proxy servers by Whispering Wind Personal Developers. A security vulnerability exists in Blitz Panel version 1.17.0, which stems from an open redirection in the nexturl parameter in the login endpoint that could lead to phishing attacks or...

PT-2025-53299

Name of the Vulnerable Software and Affected Versions Blitz Panel version 1.17.0 Description An open redirect issue exists in the login functionality of Blitz Panel. The issue is located in the /login endpoint and involves the next url parameter. Successful exploitation could allow an attacker to...

EUVD-2025-180330

Malicious code in ariel-blitz-rocket-concurrently npm...

Malicious code in miranda-postcss-blitz-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177799

Malicious code in miranda-postcss-blitz-module npm...

Malicious code in passport-scripts-blitz-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65c0c8e48693fe233a79a8411bde00985485c82e5b8bcdd73ed19eb6c312b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177441

Malicious code in ophiuchus-europa-charon-blitz npm...

EUVD-2025-175445

Malicious code in yildun-blitz-miranda-accretion npm...

EUVD-2025-175558

Malicious code in whitedwarf-inquirer-csv-blitz npm...

EUVD-2025-180026

Malicious code in blitz-eslint-plugin-csrf-indus npm...

EUVD-2025-176034

Malicious code in technosignature-wezen-blitz-blazar npm...

EUVD-2025-178386

Malicious code in install-enif-blitz-supervisor npm...

MAL-2025-188580 Malicious code in passport-scripts-blitz-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65c0c8e48693fe233a79a8411bde00985485c82e5b8bcdd73ed19eb6c312b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185558 Malicious code in ariel-blitz-rocket-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179134

Malicious code in enif-blitz-selenium-sedna npm...

EUVD-2025-175914

Malicious code in transform-blitz-element-ui-helios npm...

Malicious code in ariel-blitz-rocket-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178240

Malicious code in jupiter-scripts-html-webpack-plugin-blitz npm...

EUVD-2025-178560

Malicious code in helmet-blitz-izar-update npm...

EUVD-2025-179071

Malicious code in eridanus-paleoceanography-blitz-elektra npm...