EUVD-2025-200809

Malicious code in elf-stats-snowy-candy-850 npm...

Malicious code in elf-stats-snowy-candy-850 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270c6ea36a31bf1f48f6d591f72e5ae861e3aa51fa9256ec8aa81bf01be09fd6 The package elf-stats-snowy-candy-850 was found to contain malicious code...

MAL-2025-192120 Malicious code in elf-stats-rooftop-candy-837 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d23179e02e2804b8562d1f21b75a6ff3a543ded7691abda00867fdcabcb557 The package elf-stats-rooftop-candy-837 was found to contain malicious code...

MAL-2025-191988 Malicious code in elf-stats-aurora-candy-291 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b799b717b10ad3436e0e4210c4c21dffdd72a170410e9dfc3dae9918051675b9 The package elf-stats-aurora-candy-291 was found to contain malicious code...

MAL-2025-192143 Malicious code in elf-stats-snowy-candy-850 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270c6ea36a31bf1f48f6d591f72e5ae861e3aa51fa9256ec8aa81bf01be09fd6 The package elf-stats-snowy-candy-850 was found to contain malicious code...

Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-200966

Malicious code in elf-stats-frosty-candy-393 npm...

MAL-2025-191981 Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...

WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin SupportCandy versions = 3.4.1...

EUVD-2025-145814

Malicious code in candy-yul npm...

MAL-2025-170998 Malicious code in candy-yul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c2ed33ebdeac7cb539317af14bb3bcc327b1ae3d45cd5d445f8e8b126063e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-38429

Malicious code in elf-stats-northbound-candy-916 npm...

MAL-2025-49401 Malicious code in elf-stats-northbound-candy-916 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff880a8983abeac646ee0cbd12a48986cd76aadf15ff180cb363c7e1d6888d7a The package elf-stats-northbound-candy-916 was found to contain malicious code...

Malicious code in elf-stats-northbound-candy-916 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff880a8983abeac646ee0cbd12a48986cd76aadf15ff180cb363c7e1d6888d7a The package elf-stats-northbound-candy-916 was found to contain malicious code...

EUVD-2014-6574

Malware in sbrugna...

EUVD-2014-5745

Malware in sbrugna...

CVE-2024-53726

CVE-2024-53726 describes a Cross-Site Request Forgery (CSRF) leading to Stored XSS in the WordPress plugin RealtyCandy IDX Broker Extended (versions

Malicious code in rspec-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7016 Malicious code in rspec-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in referral-candy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...