EUVD-2025-198180

esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript...

MAL-2025-191870 Malicious code in sitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09dd85c25ad8d35e40f8afc89c4a7f0322beb48a72db826b13c2142810460ac9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Path Traversal

Liferay Portal is vulnerable to path traversal. The vulnerability is due to improper validation of query strings in the ComboServlet, which allows an attacker to access arbitrary CSS/JS files and repeatedly load them to exploit the system...

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-180459

Malicious code in algol-elektra-rollup-style-loader npm...

EUVD-2025-178474

Malicious code in hyperion-build-style-loader-lynx npm...

EUVD-2025-177431

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...

EUVD-2025-179034

Malicious code in eslint-plugin-pyxis-library-style-loader npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

EUVD-2025-176109

Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...

EUVD-2025-179398

Malicious code in darkenergy-style-loader-style-loader-node-config npm...

EUVD-2025-176814

Malicious code in radioastronomy-augmentedreality-library-style-loader npm...

Malicious code in tree-notify-fire-resolve-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179977

Malicious code in boson-style-loader-less-loader-superflare npm...

EUVD-2025-176856

Malicious code in quark-eslint-config-materialize-css-loader npm...

EUVD-2025-180244

Malicious code in augmentedreality-mesosphere-style-loader-registry npm...

MAL-2025-189964 Malicious code in transform-ethology-weywot-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6827172d705088dbbceab6e5d571e982778c40522594d4b1769be2151dd4821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178769

Malicious code in ganymede-style-loader-xanthus-javascript npm...

Malicious code in algol-elektra-rollup-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...