📄 Lepton CMS 7.4.0 Cross Site Scripting / Code Execution

Lepton CMS version 7.4.0 has a vulnerability which allows for a persistent cross site scripting payload to escalate into PHP execution through the droplet engine...

EUVD-2025-180491

Malicious code in aether-start-lepton-mdx npm...

EUVD-2025-176436

Malicious code in semantic-release-boson-lepton-kastra npm...

MAL-2025-190379 Malicious code in xenos-lepton-cosmogenic-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd42edaad102d51c7897f5f9f97d176aabb390e1ccf4beee36af7105a32ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178137

Malicious code in lepton-weywot-mira-pino-pretty npm...

EUVD-2025-179423

Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis npm...

EUVD-2025-178138

Malicious code in lepton-sociobiology-duplex-nestjs npm...

EUVD-2025-175563

Malicious code in wezen-lepton-bootes-ultra npm...

EUVD-2025-178481

Malicious code in hydra-lepton-interstellarmedium-entanglement npm...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

EUVD-2025-178141

Malicious code in lepton-cache-soap-hexo npm...

EUVD-2025-177250

Malicious code in perseus-selenium-lepton-ganymede npm...

EUVD-2025-176735

Malicious code in regulus-winston-lepton-webdriver-mocha npm...

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176519

Malicious code in sass-loader-lepton-nebula-virgo npm...

EUVD-2025-178140

Malicious code in lepton-husky-phenomic-hermes npm...

Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177483

Malicious code in odin-lepton-superagent-uninstall npm...

EUVD-2025-176859

Malicious code in quark-charon-hercules-lepton npm...

EUVD-2025-177594

Malicious code in nightwatch-levels-lepton-phoebe npm...