307 matches found
PT-2025-49919
Name of the Vulnerable Software and Affected Versions Catch Themes Essential Widgets versions through 2.2.2 Description A flaw exists in Catch Themes Essential Widgets that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page...
EUVD-2025-179847
Malicious code in catch-bash-mu-daemon-slow npm...
Malicious code in minify-mu-catch-authenticate-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175868
Malicious code in try-alert-hash-catch-index npm...
EUVD-2025-175786
Malicious code in upsilon-catch-new-epsilon-unix npm...
EUVD-2025-179846
Malicious code in catch-bash-string-long-catch npm...
EUVD-2025-178026
Malicious code in long-class-report-grep-catch npm...
EUVD-2025-175947
Malicious code in throw-omega-catch-hot-sanitize npm...
EUVD-2025-179624
Malicious code in compile-catch-gamma-encode-resolve npm...
EUVD-2025-175662
Malicious code in warn-pi-visualize-catch-slow npm...
EUVD-2025-179845
Malicious code in catch-byte-decompress-cluster-assert npm...
EUVD-2025-179093
Malicious code in epsilon-catch-cold-beta-new npm...
EUVD-2025-179842
Malicious code in catch-stack-load-public-grep npm...
EUVD-2025-179844
Malicious code in catch-daemon-mock-emulate-validate npm...
EUVD-2025-179162
Malicious code in emulate-catch-file-mu-parse npm...
EUVD-2025-176728
Malicious code in reject-book-catch-module-short npm...
EUVD-2025-177829
Malicious code in minify-mu-catch-authenticate-user npm...
EUVD-2025-176595
Malicious code in root-rain-catch-sigma-float npm...
MAL-2025-189570 Malicious code in socket-minify-export-catch-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d97ee2bf204b3fc45d68f49bafdd6a020615e4ad51cbc83f463f193b80ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...