EUVD-2025-115614

Malicious code in castor-rest-orbit-xml npm...

EUVD-2025-120193

Malicious code in xml-umbra-pavo-pm2 npm...

EUVD-2025-121898

Malicious code in soap-neptune-xml-virgo npm...

EUVD-2025-113692

Malicious code in farout-kronos-xml-aurora npm...

EUVD-2025-124069

Malicious code in ophiuchus-xml-sqlite-lyra npm...

Malicious code in metalsmith-xml-thuban-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f60078b97cbd0fccfbf8cce00fe77723c5d62b3bf09c43ef64de4ce5da2320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124684

Malicious code in mutation-telesto-mongodb-xml npm...

Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121217

Malicious code in toml-hexo-xml-capella npm...

EUVD-2025-113878

Malicious code in eslint-plugin-galaxy-xml-canopus npm...

EUVD-2025-111586

Malicious code in loop-mensa-xml-winston npm...

EUVD-2025-114042

Malicious code in enif-xml-ganymede-draco npm...

EUVD-2025-120196

Malicious code in xml-start-cosmiconfig-cypress npm...

MAL-2025-140427 Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149124 Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149209 Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EulerOS 2.0 SP10 : libxslt (EulerOS-SA-2025-2422)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion...

WordPress plugin WP Import – Ultimate CSV XML Importer for WordPress 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...

EulerOS 2.0 SP12 : libxslt (EulerOS-SA-2025-2365)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion...

AZL-70187 CVE-2025-12748 affecting package libvirt for versions less than 10.0.0-7

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too...