EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-hydra-postcss-loader-config (npm)

The package query-hydra-postcss-loader-config was found to contain malicious code...

MAL-2025-31280 Malicious code in query-hydra-postcss-loader-config (npm)

The package query-hydra-postcss-loader-config was found to contain malicious code...

PT-2006-3356 · Popphoto · Popphoto Studio

Name of the Vulnerable Software and Affected Versions: PopPhoto Studio versions 3.5.4 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter, specifically through the cfg'popphoto base path' variable in the...