EUVD-2025-180091

Malicious code in betelgeuse-development-heliophysics-cordelia npm...

EUVD-2025-179299

Malicious code in development-webdriver-mocha-leda-bellatrix npm...

EUVD-2025-179307

Malicious code in development-dependencies-cybernetics-cryptography npm...

EUVD-2025-178772

Malicious code in ganymede-publish-development-janus npm...

EUVD-2025-177224

Malicious code in phenomic-prettier-stylelint-development-library npm...

EUVD-2025-179301

Malicious code in development-rollup-pipe-koa npm...

EUVD-2025-179298

Malicious code in development-xerxes-dagda-repository npm...

EUVD-2025-177119

Malicious code in pm2-development-postcss-callback npm...

EUVD-2025-176670

Malicious code in resolvers-typeorm-dependencies-development npm...

EUVD-2025-179302

Malicious code in development-postcss-loader-webpack-cosmicweb npm...

EUVD-2025-175628

Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...

Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186388 Malicious code in crust-mui-development-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b16dfeb9cbb104d60dfcaa311925c95ada246aa8e45fc1c2e109c04f8e8b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179404

Malicious code in darkenergy-config-pulsar-development npm...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

Astro 跨站脚本漏洞

Astro is a web framework for content-driven websites in the Astro open source. A cross-site scripting vulnerability exists in Astro versions 5.2.0 through prior to 5.15.6, which stems from a reflective cross-site scripting vulnerability in the development server error page that could lead to the...

An In-Depth Systematic Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites

Password updates are a critical account security measure and an essential part of the password lifecycle. Service providers and common security recommendations advise users to update their passwords in response to incidents or as a critical cyber hygiene measure. However, password update processe...

PT-2025-46907

Name of the Vulnerable Software and Affected Versions Astro versions 5.2.0 through 5.15.6 Description A Reflected Cross-Site Scripting XSS vulnerability exists in Astro’s development server error pages when the trailingSlash configuration option is used. An attacker can inject arbitrary JavaScrip...