CVE-2019-20525

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter...

CVE-2019-20527

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter...

CVE-2019-20365

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page...

CVE-2020-24601

In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page...

CVE-2020-24693

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization...

EUVD-2025-177891

Malicious code in mesosphere-kinetic-ignite-tectonic npm...

EUVD-2025-177734

Malicious code in multiverse-perseus-ignite-ceres npm...

EUVD-2025-177565

Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...

EUVD-2025-178457

Malicious code in ignite-configstore-morgan-kastra npm...

EUVD-2025-180363

Malicious code in archaeogenetics-ganymede-paleoceanography-ignite npm...

EUVD-2025-179287

Malicious code in docusaurus-impulse-dagda-ignite npm...

EUVD-2025-178454

Malicious code in ignite-jekyll-europa-galaxy npm...

EUVD-2025-180302

Malicious code in astro-ignite-scripts-pulsar npm...

EUVD-2025-178453

Malicious code in ignite-puppeteer-procyon-vortex npm...

EUVD-2025-177849

Malicious code in meteor-spectron-webdriver-ignite-spawn npm...

EUVD-2025-178455

Malicious code in ignite-hermes-ophiuchus-semantic-ui npm...

EUVD-2025-179457

Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass npm...

EUVD-2025-177840

Malicious code in middleware-mini-css-extract-plugin-ignite-json npm...

EUVD-2025-178458

Malicious code in ignite-chai-mira-neptune npm...

Malicious code in ignite-rehype-xo-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...