WordPress Spider Calendar <=1.4.9 - SQL Injection

WordPress Spider Calendar plugin through 1.4.9 is susceptible to SQL injection. An attacker can execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php, thus making it possible to obtain sensitive information, modify data, and/or execut...

EUVD-2025-179019

Malicious code in ethology-zephyr-dorado-browserify npm...

EUVD-2025-179273

Malicious code in dorado-norma-sequelize-hydrogeology npm...

EUVD-2025-179062

Malicious code in eris-sync-loglevel-dorado npm...

EUVD-2025-179271

Malicious code in dorado-spectron-webdriver-spectron-cache npm...

EUVD-2025-178801

Malicious code in gacrux-dorado-impulse-test npm...

EUVD-2025-176702

Malicious code in remark-dorado-coronalmassejection-aldebaran npm...

EUVD-2025-179501

Malicious code in cross-env-dorado-eslint-config-zephyr npm...

EUVD-2025-179276

Malicious code in dorado-hexo-sqlite-postcss-loader npm...

Malicious code in dorado-spectron-webdriver-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d89c14e7aa074c70529c5ea2e78d695c2f8741dc72356cc92dcc4df097c7884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178250

Malicious code in juno-areology-dorado-webdriver-mocha npm...

EUVD-2025-177050

Malicious code in private-dorado-grunt-jupiter npm...

MAL-2025-187081 Malicious code in gacrux-dorado-impulse-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3ff1c02ec4218b6d3cfd1acef8705073c0a75768296613710e6fd716088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-dorado-eslint-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179272

Malicious code in dorado-slidev-hyperion-avior npm...

EUVD-2025-175488

Malicious code in xerxes-paleontology-dorado-pavo npm...

EUVD-2025-179277

Malicious code in dorado-development-troposphere-futurology npm...

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176898

Malicious code in pulsar-selenium-oortcloud-dorado npm...

Malicious code in dorado-slidev-hyperion-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9b51963730a8f63d82b2a36879f53b58198545402e1f775c81363ba94df60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...