510 matches found
Malicious code in supporting_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69ea33b789c263ed8dd20d052608564fece2564e36ab58cb7d73ee8d2479f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49517
Malicious code in reasonabledragonflyz3n npm...
EUVD-2025-50542
Malicious code in communistdragonflyz3n npm...
EUVD-2025-49674
Malicious code in outrageousdragonflyz3n npm...
MAL-2025-60995 Malicious code in outrageous_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4242534ff0bad2de5638da089a9b2ff7bc49ca6903f3cd7ca14e6b1fa4c8dd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Improper Resource Management
Dragonfly is vulnerable to Improper Resource Management. The vulnerability is due to the processPieceFromSource method failing to update the usedTraffic field because of an uninitialized variable, which allows an attacker to exploit incorrect rate limiting and cause a denial-of-service condition...
Improper Certificate Validation
Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to TLS certificate verification being disabled in HTTP clients, which allows an attacker to perform a man-in-the-middle attack and supply invalid data, leading to denial of service and file integrity issues...
Timing Attack
Dragonfly is vulnerable to Timing Attack. The vulnerability is due to the use of simple string comparisons in the Proxy feature’s access control mechanism, which allows an attacker to guess the password one character at a time by analyzing response time variations...
Hash Collision Weakness
Dragonfly is vulnerable to Hash Collision Weakness. The vulnerability is due to the use of insecure hash functions such as MD5 for verifying downloaded files, which allows an attacker to craft malicious files with colliding hashes and replace legitimate files without detection...
EUVD-2006-4152
Malware in sbrugna...
EUVD-2006-0734
Malware in sbrugna...
EUVD-2006-1037
Malware in sbrugna...
EUVD-2005-0915
Malware in sbrugna...
EUVD-2017-0293
Malware in sbrugna...
EUVD-2006-0733
Malware in sbrugna...
EUVD-2005-4346
Malware in sbrugna...
EUVD-2017-0276
Malware in sbrugna...
EUVD-2025-29767
Malicious code in bioql PyPI...