MAL-2025-67022 Malicious code in bold-coral-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a612d47fac5898e781bc5bf60e0d23184f42ab9e4f70e57a053fa6b084dd84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon-fuchsia-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2cdfcfa5deb6fe70944c94c3e46145425120e6f3ce50826efc688c1da5d490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56706

Malicious code in vicariouspuffinz3n npm...

EUVD-2025-57350

Malicious code in significantpuffinz3n npm...

EUVD-2025-60283

Malicious code in civilianpuffinz3n npm...

EUVD-2025-50101

Malicious code in grandpuffinz3n npm...

EUVD-2025-49426

Malicious code in scornfulpuffinz3n npm...

EUVD-2025-50292

Malicious code in entirepuffinz3n npm...

EUVD-2025-48265

Malicious code in conservationpuffinz3n npm...

MAL-2025-58751 Malicious code in solid_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1b6fec31e904e133b5b1d4321b54890a2babefef16de3396f31c380d3e3dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47820

Malicious code in eventualpuffinz3n npm...

EUVD-2025-45229

Malicious code in smoothpuffinz3n npm...

Malicious code in square-red-puffin (npm)

--- -= Per source details. Do not edit below this line.=-...

Puffin Web Browser - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puffin Web Browser published at the 'play' market has multiple vulnerabilities...

Unfixed XSS vulnerability at www.puffin.co.uk

Security researcher Uber0n, has submitted on 11/04/2008 a cross-site-scripting XSS vulnerability affecting www.puffin.co.uk, which at the time of submission ranked 314967 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is current...