445 matches found
GitHub: OAuth redirect uri validation bypass for :proxima_first_party_sync apps
A vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. The vulnerability was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. The vulnerability was reported through the GitHub Bug Bounty program...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
EUVD-2025-176953
Malicious code in proxima-uglify-js-biomimicry-quasar npm...
EUVD-2025-176248
Malicious code in spinner-proxima-cybernetics-cosmochemistry npm...
EUVD-2025-175716
Malicious code in virgo-joviology-proxima-install npm...
EUVD-2025-178394
Malicious code in inquirer-loop-airbnb-proxima npm...
EUVD-2025-178246
Malicious code in juno-proxima-wolf-tailwindcss npm...
EUVD-2025-179493
Malicious code in crust-proxima-typeorm-duplex npm...
Malicious code in virgo-joviology-proxima-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177442
Malicious code in ophiuchus-eleventy-fornax-proxima npm...
EUVD-2025-180531
Malicious code in abiogenesis-proxima-astro-backend npm...
EUVD-2025-176620
Malicious code in robotics-proxima-thuban-comet npm...
EUVD-2025-179578
Malicious code in cordelia-babel-on-proxima npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
EUVD-2025-176960
Malicious code in proxima-neptune-altair-neptune npm...
EUVD-2025-176963
Malicious code in proxima-farout-react-bootstrap-puppeteer npm...
EUVD-2025-179882
Malicious code in capella-proxima-geomorphology-sirius npm...
Malicious code in subscription-proxima-levels-phenomic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae0a4d1da9dccbfd49a0d5afe640d0eb483fd0d87be0ffb321142c0dec91f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...