95 matches found
CVE-2026-7714 crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing authentication
A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwafunctions.py of the component Admin Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The...
CVE-2026-7713 crocodilestick Calibre-Web-Automated Kobo auth-token Route kobo_auth.py generate_auth_token improper authorization
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generateauthtoken of the file cps/koboauth.py of the component Kobo auth-token Route. The manipulation results in improper authorization. The attack may be performed fr...
EUVD-2025-117115
Malicious code in royal-turquoise-crocodile npm...
EUVD-2025-117050
Malicious code in successive-black-crocodile npm...
MAL-2025-138987 Malicious code in royal-turquoise-crocodile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remaining_crocodile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026f2d40b4ff92b02acf1f9151add1ad9b53404446d869faab7ff86036c22b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136553 Malicious code in remaining_crocodile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026f2d40b4ff92b02acf1f9151add1ad9b53404446d869faab7ff86036c22b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-97981
Malicious code in innocentcrocodilez3n npm...
EUVD-2025-103526
Malicious code in naughtycrocodilez3n npm...
EUVD-2025-100787
Malicious code in causalcrocodilez3n npm...
EUVD-2025-97892
Malicious code in isolatedcrocodilez3n npm...
EUVD-2025-101542
Malicious code in amusedcrocodilez3n npm...
EUVD-2025-105092
Malicious code in gastriccrocodilez3n npm...
EUVD-2025-92722
Malicious code in closedcrocodilez3n npm...
EUVD-2025-89551
Malicious code in painfulcrocodilez3n npm...
EUVD-2025-92142
Malicious code in establishedcrocodilez3n npm...
EUVD-2025-89826
Malicious code in noisycrocodilez3n npm...
MAL-2025-112635 Malicious code in allied_crocodile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6117458b4fee4d03475f7c4ca1f060d6e6cad314f534bae24a55bb49d5fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...