11159 matches found
EUVD-2025-135564
Malicious code in thambi-retf-rest npm...
MAL-2025-179077 Malicious code in thambi-ref-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in savion-rest-pix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in thambi-ref-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135563
Malicious code in thambi-retf-rest npm...
EUVD-2025-135579
Malicious code in thambi-ref-rest npm...
EUVD-2025-136429
Malicious code in savion-rest-pix npm...
MAL-2025-178632 Malicious code in savion-rest-pix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-27368 IBM OpenPages Information Disclosure
IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...
CVE-2025-12633 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...
Malicious code in dagda-fusion-altair-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111863
Malicious code in lacerta-rest-mocha-foundation npm...
EUVD-2025-122568
Malicious code in rest-metalsmith-phoebe-pm2 npm...
EUVD-2025-122565
Malicious code in rest-nebula-apollo-bootes npm...
EUVD-2025-116886
Malicious code in adonis-rest-stream-non-blocking npm...
EUVD-2025-122564
Malicious code in rest-nextjs-pegasus-colors npm...
EUVD-2025-121950
Malicious code in sirius-rest-atlas-rate-limiter npm...
EUVD-2025-122572
Malicious code in rest-husky-aurora-chromedriver npm...