12832 matches found
EUVD-2025-114206
Malicious code in electron-builder-gulp-tailwindcss-nova npm...
EUVD-2025-116722
Malicious code in andromeda-octans-gravity-electron-builder npm...
EUVD-2025-114208
Malicious code in electron-builder-ganymede-tethys-module npm...
EUVD-2025-116829
Malicious code in aldebaran-electron-builder-subscription-testcafe npm...
EUVD-2025-114200
Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader npm...
EUVD-2025-114204
Malicious code in electron-builder-jupiter-markdown-schema npm...
EUVD-2025-116024
Malicious code in bootes-electron-builder-ariel-enceladus npm...
EUVD-2025-114898
Malicious code in cosmos-nightmare-xenon-electron-builder npm...
EUVD-2025-111377
Malicious code in materialize-electron-builder-deimos-mui npm...
EUVD-2025-123896
Malicious code in pegasus-eclipse-electron-builder-materialize npm...
EUVD-2025-114207
Malicious code in electron-builder-gridsome-callback-aldebaran npm...
EUVD-2025-114215
Malicious code in electron-builder-aldebaran-betelgeuse-publish npm...
MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141902 Malicious code in electron-builder-ganymede-tethys-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6980f4f142809989641586af71b87ec16b320ce93c4364d719427303535474e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141926 Malicious code in electron-phoebe-electron-builder-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80972fc2e361fb8c4448eaa72d3719327b32fd4539f424c63b7b1874f596fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147719 Malicious code in scorpius-umbra-electron-builder-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
pH7 Social Dating Builder 安全漏洞
pH7 Social Dating Builder is an open source social dating system from pH7 Social Dating CMS pH7CMS. A security vulnerability exists in pH7 Social Dating Builder version 17.9.1, which stems from the messaging system not cleaning up user submissions and could lead to a stored cross-site scripting...
CVE-2025-12665
The Ninja Countdown | Fastest Countdown Builder plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ninjacountdownadminajax' AJAX endpoint in all versions up to, and including, 1.5.0. This makes it possible for authenticated attackers, with...
CVE-2025-12665 Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion
The Ninja Countdown | Fastest Countdown Builder plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ninjacountdownadminajax' AJAX endpoint in all versions up to, and including, 1.5.0. This makes it possible for authenticated attackers, with...
