304 matches found
EUVD-2025-69288
Malicious code in liquidwildebeestz3n npm...
EUVD-2025-63286
Malicious code in liquidbisonz3n npm...
MAL-2025-95268 Malicious code in liquid_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68b7934cfc3777be8f6d526813cce13748fda60c225287ab421d1d737c69bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63287
Malicious code in liquidbandicootz3n npm...
Malicious code in liquid_lion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8b05c612d291d321644318a362380b446fd2804ef735fcb9ee852b008f77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in liquid-amber-kiwi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53472
Malicious code in liquid-olive-python npm...
EUVD-2025-53474
Malicious code in liquid-crimson-manatee npm...
EUVD-2025-53471
Malicious code in liquid-rose-grouse npm...
EUVD-2025-53476
Malicious code in liquid-amber-kiwi npm...
Malicious code in liquid-bronze-barnacle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149dfc613289074d944a346ebe80bc1a353e49827a38a2c17c171e9d5683dfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53473
Malicious code in liquid-gray-booby npm...
EUVD-2025-53475
Malicious code in liquid-bronze-barnacle npm...
Malicious code in liquid-gray-booby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69175 Malicious code in liquid-crimson-manatee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87da9a7f16c79bc4ad163cefc681c9b1c80c43c146ae05ff51f4087ad9a9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69176 Malicious code in liquid-gray-booby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
WordPress The Events Calendar plugin <= 6.15.9 - Missing Authorization to Authenticated (Subscriber+) Draft Event Title/QR Code Exposure vulnerability
Missing Authorization to Authenticated Subscriber+ Draft Event Title/QR Code Exposure vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin The Events Calendar versions = 6.15.9...
fbdev: omap: use threaded IRQ for LCD DMA
...
GHSA-VFFH-C9PQ-4CRH Uptime Kuma Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read
Summary In some Notification types e.g., Webhook, Telegram, the send function allows user-controlled renderTemplate input. This leads to a Server-side Template Injection SSTI vulnerability that can be exploited to read arbitrary files from the server. Details The root cause is how Uptime Kuma...