MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71051 Malicious code in tasty-moccasin-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8124192d4df1385de1426d5f0da4f32a98757194ab4c2953dee00101dfebd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59183

Malicious code in immensedragonflyz3n npm...

EUVD-2025-49774

Malicious code in muddydragonflyz3n npm...

EUVD-2025-49517

Malicious code in reasonabledragonflyz3n npm...

Malicious code in muddy_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6143de05717bffedfb44dac84279bf2c9c12d3e1c50564304118d90838cc14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69ea33b789c263ed8dd20d052608564fece2564e36ab58cb7d73ee8d2479f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49674

Malicious code in outrageousdragonflyz3n npm...

EUVD-2025-50542

Malicious code in communistdragonflyz3n npm...

MAL-2025-60995 Malicious code in outrageous_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4242534ff0bad2de5638da089a9b2ff7bc49ca6903f3cd7ca14e6b1fa4c8dd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Improper Resource Management

Dragonfly is vulnerable to Improper Resource Management. The vulnerability is due to the processPieceFromSource method failing to update the usedTraffic field because of an uninitialized variable, which allows an attacker to exploit incorrect rate limiting and cause a denial-of-service condition...

Improper Certificate Validation

Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to TLS certificate verification being disabled in HTTP clients, which allows an attacker to perform a man-in-the-middle attack and supply invalid data, leading to denial of service and file integrity issues...

Timing Attack

Dragonfly is vulnerable to Timing Attack. The vulnerability is due to the use of simple string comparisons in the Proxy feature’s access control mechanism, which allows an attacker to guess the password one character at a time by analyzing response time variations...

Hash Collision Weakness

Dragonfly is vulnerable to Hash Collision Weakness. The vulnerability is due to the use of insecure hash functions such as MD5 for verifying downloaded files, which allows an attacker to craft malicious files with colliding hashes and replace legitimate files without detection...

EUVD-2005-4346

Malware in sbrugna...

EUVD-2005-0915

Malware in sbrugna...

EUVD-2006-0733

Malware in sbrugna...

EUVD-2006-0734

Malware in sbrugna...

EUVD-2017-0276

Malware in sbrugna...

EUVD-2017-0293

Malware in sbrugna...