📄 Lepton CMS 7.4.0 Cross Site Scripting / Code Execution

Lepton CMS version 7.4.0 has a vulnerability which allows for a persistent cross site scripting payload to escalate into PHP execution through the droplet engine...

MAL-2025-187741 Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178137

Malicious code in lepton-weywot-mira-pino-pretty npm...

Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176859

Malicious code in quark-charon-hercules-lepton npm...

EUVD-2025-176126

Malicious code in supercluster-grus-non-blocking-lepton npm...

EUVD-2025-175497

Malicious code in xenos-lepton-cosmogenic-telesto npm...

EUVD-2025-177250

Malicious code in perseus-selenium-lepton-ganymede npm...

EUVD-2025-176735

Malicious code in regulus-winston-lepton-webdriver-mocha npm...

EUVD-2025-178140

Malicious code in lepton-husky-phenomic-hermes npm...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

EUVD-2025-178138

Malicious code in lepton-sociobiology-duplex-nestjs npm...

EUVD-2025-178136

Malicious code in lepton-xanthus-paleoanthropology-abiogenesis npm...

EUVD-2025-180491

Malicious code in aether-start-lepton-mdx npm...

EUVD-2025-176436

Malicious code in semantic-release-boson-lepton-kastra npm...

EUVD-2025-178481

Malicious code in hydra-lepton-interstellarmedium-entanglement npm...

EUVD-2025-177594

Malicious code in nightwatch-levels-lepton-phoebe npm...

MAL-2025-186553 Malicious code in deneb-warp-nucleosynthesis-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e70719cc700229a9dd67dc10f095ef7a077cd2994062c4934645d61f181e602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178141

Malicious code in lepton-cache-soap-hexo npm...

EUVD-2025-179423

Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis npm...