12828 matches found
CVE-2025-12366 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.5 via the pagelayerreplacepage function due to missing validation on a user controlled key. This makes it possible for...
EUVD-2025-180188
Malicious code in await-husky-electron-builder-superagent npm...
EUVD-2025-176070
Malicious code in taphonomy-neuromorphic-cressida-electron-builder npm...
Malicious code in stratigraphy-helios-janus-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf187e7a7ca538a0b527d50aeb801c014ec1950459808d4fe3615e1fda01ea6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179183
Malicious code in electron-builder-kaus-non-blocking-europa npm...
EUVD-2025-179750
Malicious code in charon-transhumanism-zephyr-electron-builder npm...
EUVD-2025-180162
Malicious code in babel-electron-builder-hexo-nightmare npm...
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187730 Malicious code in leda-electron-builder-chromedriver-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9799029874852e5e9eb516a15d919a84f36ac43653e1671cfaaa75560b7926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176246
Malicious code in spinner-spectron-electron-builder-loglevel npm...
EUVD-2025-179184
Malicious code in electron-builder-csv-npm-asteroid npm...
EUVD-2025-179197
Malicious code in eigenstate-electron-builder-despina-bionics npm...
EUVD-2025-179181
Malicious code in electron-builder-pipe-markdownlint-nextjs npm...
Malicious code in electron-builder-csv-npm-asteroid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1c41f7b478def4f98d67c744bd71324c06f401c2371977bcbd2022b1877a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176199
Malicious code in stratigraphy-helios-janus-electron-builder npm...
EUVD-2025-176650
Malicious code in reveal-md-electron-builder-chalk-steganography npm...
EUVD-2025-180449
Malicious code in alphard-fetch-electron-builder-levels npm...
EUVD-2025-177978
Malicious code in magellan-hyperion-gridsome-electron-builder npm...