338 matches found
WordPress Spider Calendar <=1.4.9 - SQL Injection
WordPress Spider Calendar plugin through 1.4.9 is susceptible to SQL injection. An attacker can execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php, thus making it possible to obtain sensitive information, modify data, and/or execut...
Malicious code in dorado-module-centauri-procyon (npm)
Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview bellatrix-dorado-halley-sagitta is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious code in dorado-slidev-hyperion-avior (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9b51963730a8f63d82b2a36879f53b58198545402e1f775c81363ba94df60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-spectron-webdriver-spectron-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d89c14e7aa074c70529c5ea2e78d695c2f8741dc72356cc92dcc4df097c7884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lacerta-auth0-callisto-dorado (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175800
Malicious code in update-dorado-farout-draco npm...
EUVD-2025-175488
Malicious code in xerxes-paleontology-dorado-pavo npm...
EUVD-2025-177399
Malicious code in oscillation-grunt-magellan-dorado npm...
EUVD-2025-177118
Malicious code in pm2-dorado-lithosphere-gravitationalwave npm...
EUVD-2025-176858
Malicious code in quark-dorado-ethology-loglevel npm...
EUVD-2025-176796
Malicious code in rate-limiter-areology-dorado-apex npm...
EUVD-2025-176702
Malicious code in remark-dorado-coronalmassejection-aldebaran npm...
EUVD-2025-178801
Malicious code in gacrux-dorado-impulse-test npm...
EUVD-2025-178167
Malicious code in lacerta-auth0-callisto-dorado npm...
EUVD-2025-179569
Malicious code in coronalmassejection-holography-dorado-command npm...
EUVD-2025-179296
Malicious code in dione-dorado-apollo-mongodb npm...
EUVD-2025-179274
Malicious code in dorado-jest-gatsby-fornax npm...