4550 matches found
EUVD-2025-115114
Malicious code in commitlint-readable-standard-levels npm...
EUVD-2025-115985
Malicious code in bootstrap-playwright-levels-browserify npm...
EUVD-2025-120274
Malicious code in xenon-process-levels-cassini npm...
EUVD-2025-121869
Malicious code in socketio-levels-izar-cypress npm...
MAL-2025-149657 Malicious code in xenon-process-levels-cassini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2c758d7d5bda40bcd116ee3544ebbbc9fd22d8e381982f8b1e49428309067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140940 Malicious code in commitizen-sirius-levels-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d4da1d7df5154dbec6dc9e1b5df6c8a185d3ee33fc1050930d94bfe6457cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121382
Malicious code in terser-webpack-plugin-despina-terser-webpack-plugin-levels npm...
MAL-2025-149644 Malicious code in xenon-fork-levels-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89814b0b9aaa2fe6cd27e600a8b89c88ca97ce6c6130c4af46a9e19ebcde5ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142788 Malicious code in galaxy-csv-middleware-levels (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123201
Malicious code in proxima-library-solis-levels npm...
EUVD-2025-111745
Malicious code in levels-yaml-build-shelljs npm...
EUVD-2025-114952
Malicious code in corvus-levels-winston-apex npm...
CVE-2025-53246
Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...
CVE-2025-58629
Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through 2.0.9...
CVE-2025-53246
Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...
EUVD-2025-38136
Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...
EUVD-2025-37999
Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...
EUVD-2025-37503
IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p6, and all prior versions allows some IdentityIQ web services that provide non-HTML content to be accessed via a URL path that will set the Content-Type to HTML allowing a...
EUVD-2025-37342
Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...
CVE-2025-64219
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.18...