EUVD-2025-145814

Malicious code in candy-yul npm...

MAL-2025-170998 Malicious code in candy-yul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c2ed33ebdeac7cb539317af14bb3bcc327b1ae3d45cd5d445f8e8b126063e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elf-stats-northbound-candy-916 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff880a8983abeac646ee0cbd12a48986cd76aadf15ff180cb363c7e1d6888d7a The package elf-stats-northbound-candy-916 was found to contain malicious code...

EUVD-2025-38429

Malicious code in elf-stats-northbound-candy-916 npm...

MAL-2025-49401 Malicious code in elf-stats-northbound-candy-916 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff880a8983abeac646ee0cbd12a48986cd76aadf15ff180cb363c7e1d6888d7a The package elf-stats-northbound-candy-916 was found to contain malicious code...

EUVD-2014-5745

Malware in sbrugna...

EUVD-2014-6574

Malware in sbrugna...

CVE-2024-53726

CVE-2024-53726 describes a Cross-Site Request Forgery (CSRF) leading to Stored XSS in the WordPress plugin RealtyCandy IDX Broker Extended (versions

Malicious code in rspec-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7016 Malicious code in rspec-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in referral-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7011 Malicious code in referral-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6803 Malicious code in candy_-sql (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in candy-check (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6802 Malicious code in candy-check (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fca-candy-darkster (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2364 Malicious code in fca-candy-darkster (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fca-candy (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2363 Malicious code in fca-candy (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fca-anup-candy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1b28b1796fa7c3129bcc7b1876c33e7f83c54d31ecae39ceb59f543d2194f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...