EUVD-2025-119991

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...

CVE-2025-12869

CVE-2025-12869 affects the a+HRD product by aEnrich. The issue is a Stored Cross-Site Scripting vulnerability that allows remote attackers with administrator privileges to inject persistent JavaScript executed in users’ browsers on page load. Documents consistently describe this as stored XSS in ...

EUVD-2025-114098

Malicious code in eleventy-sails-inquirer-javascript npm...

Malicious code in phenomic-javascript-remark-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315149a5727b357bfa3b12aeac62126a15734f48ad61a49ce8b7ce4875619e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124345

Malicious code in nodejs-quito-deimos-publish npm...

EUVD-2025-124520

Malicious code in nestjs-nodejs-electron-builder-auth npm...

EUVD-2025-112170

Malicious code in jovian-csrf-javascript-gridsome npm...

EUVD-2025-121027

Malicious code in ultra-nightwatch-commitizen-javascript npm...

EUVD-2025-112219

Malicious code in javascript-umbriel-kronos-native npm...

EUVD-2025-124676

Malicious code in mysql-commitlint-json-standard npm...

EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

EUVD-2025-121460

Malicious code in taurus-exec-javascript-repository npm...

EUVD-2025-123957

Malicious code in parcel-markdownlint-start-uglify-js npm...

EUVD-2025-112218

Malicious code in javascript-websockets-neptune-janus npm...

EUVD-2025-116561

Malicious code in aquarius-nodejs-electron-registry npm...

EUVD-2025-121058

Malicious code in uglify-js-dagda-await-parcel npm...

EUVD-2025-116575

Malicious code in apollo-repository-uglify-js-nextjs npm...

EUVD-2025-112236

Malicious code in javascript-chai-levels-meissa npm...

EUVD-2025-122816

Malicious code in redis-javascript-ursa-polaris npm...

EUVD-2025-114481

Malicious code in development-query-pm2-uglify-js npm...