EUVD-2025-175786

Malicious code in upsilon-catch-new-epsilon-unix npm...

EUVD-2025-175662

Malicious code in warn-pi-visualize-catch-slow npm...

EUVD-2025-175947

Malicious code in throw-omega-catch-hot-sanitize npm...

EUVD-2025-179624

Malicious code in compile-catch-gamma-encode-resolve npm...

EUVD-2025-176211

Malicious code in static-view-warn-cluster-catch npm...

Malicious code in minify-mu-catch-authenticate-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179844

Malicious code in catch-daemon-mock-emulate-validate npm...

EUVD-2025-176305

Malicious code in socket-minify-export-catch-file npm...

EUVD-2025-179842

Malicious code in catch-stack-load-public-grep npm...

EUVD-2025-179847

Malicious code in catch-bash-mu-daemon-slow npm...

Malicious code in catch-stack-load-public-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c509a0b517637027dd9226985a76750f86dedd7bb0dcfaf6449347750210a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175868

Malicious code in try-alert-hash-catch-index npm...

EUVD-2025-175636

Malicious code in water-catch-cloud-upsilon-java npm...

EUVD-2025-178938

Malicious code in fast-catch-notify-epsilon-new npm...

MAL-2025-189570 Malicious code in socket-minify-export-catch-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d97ee2bf204b3fc45d68f49bafdd6a020615e4ad51cbc83f463f193b80ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

EUVD-2025-37512

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

CVE-2025-60041

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...