267 matches found
📄 Lepton CMS 7.4.0 Cross Site Scripting / Code Execution
Lepton CMS version 7.4.0 has a vulnerability which allows for a persistent cross site scripting payload to escalate into PHP execution through the droplet engine...
EUVD-2025-175563
Malicious code in wezen-lepton-bootes-ultra npm...
EUVD-2025-176126
Malicious code in supercluster-grus-non-blocking-lepton npm...
EUVD-2025-177250
Malicious code in perseus-selenium-lepton-ganymede npm...
EUVD-2025-178141
Malicious code in lepton-cache-soap-hexo npm...
MAL-2025-187741 Malicious code in lepton-cache-soap-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178140
Malicious code in lepton-husky-phenomic-hermes npm...
EUVD-2025-176735
Malicious code in regulus-winston-lepton-webdriver-mocha npm...
EUVD-2025-178138
Malicious code in lepton-sociobiology-duplex-nestjs npm...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178136
Malicious code in lepton-xanthus-paleoanthropology-abiogenesis npm...
EUVD-2025-176436
Malicious code in semantic-release-boson-lepton-kastra npm...
Malicious code in lepton-cache-soap-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178139
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...
MAL-2025-186553 Malicious code in deneb-warp-nucleosynthesis-lepton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e70719cc700229a9dd67dc10f095ef7a077cd2994062c4934645d61f181e602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190379 Malicious code in xenos-lepton-cosmogenic-telesto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd42edaad102d51c7897f5f9f97d176aabb390e1ccf4beee36af7105a32ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177483
Malicious code in odin-lepton-superagent-uninstall npm...
EUVD-2025-175497
Malicious code in xenos-lepton-cosmogenic-telesto npm...