517 matches found
EUVD-2025-54311
Malicious code in firm-red-dragonfly npm...
EUVD-2025-54837
Malicious code in disturbing-ivory-dragonfly npm...
EUVD-2025-53422
Malicious code in low-green-dragonfly npm...
MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-59183
Malicious code in immensedragonflyz3n npm...
Malicious code in supporting_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69ea33b789c263ed8dd20d052608564fece2564e36ab58cb7d73ee8d2479f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in muddy_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6143de05717bffedfb44dac84279bf2c9c12d3e1c50564304118d90838cc14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49774
Malicious code in muddydragonflyz3n npm...
EUVD-2025-50542
Malicious code in communistdragonflyz3n npm...
EUVD-2025-49517
Malicious code in reasonabledragonflyz3n npm...
EUVD-2025-49674
Malicious code in outrageousdragonflyz3n npm...
MAL-2025-60995 Malicious code in outrageous_dragonfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4242534ff0bad2de5638da089a9b2ff7bc49ca6903f3cd7ca14e6b1fa4c8dd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Improper Resource Management
Dragonfly is vulnerable to Improper Resource Management. The vulnerability is due to the processPieceFromSource method failing to update the usedTraffic field because of an uninitialized variable, which allows an attacker to exploit incorrect rate limiting and cause a denial-of-service condition...
Improper Certificate Validation
Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to TLS certificate verification being disabled in HTTP clients, which allows an attacker to perform a man-in-the-middle attack and supply invalid data, leading to denial of service and file integrity issues...
Timing Attack
Dragonfly is vulnerable to Timing Attack. The vulnerability is due to the use of simple string comparisons in the Proxy feature’s access control mechanism, which allows an attacker to guess the password one character at a time by analyzing response time variations...
Hash Collision Weakness
Dragonfly is vulnerable to Hash Collision Weakness. The vulnerability is due to the use of insecure hash functions such as MD5 for verifying downloaded files, which allows an attacker to craft malicious files with colliding hashes and replace legitimate files without detection...
EUVD-2006-0734
Malware in sbrugna...
EUVD-2006-4152
Malware in sbrugna...