59 matches found
DRUPAL-CONTRIB-2026-063
The Salesforce Suite of modules integrates Drupal with Salesforce. The Salesforce module does not properly validate the OAuth handshake during interactive authentication, allowing an attacker to hijack the authorization token and bind the site to an attacker's Salesforce account. This vulnerabili...
PT-2026-33824
A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.3.X...
EUVD-2025-81607
Malicious code in importantwildfowl0xrequest npm...
EUVD-2025-81311
Malicious code in magnificentcaribou0xrequest npm...
EUVD-2025-81159
Malicious code in muddygrasshopper0xrequest npm...
EUVD-2025-80951
Malicious code in personalcrayfish0xrequest npm...
EUVD-2025-80511
Malicious code in sophisticatedcaribou0xrequest npm...
EUVD-2025-82544
Malicious code in certainhippopotamus0xrequest npm...
EUVD-2025-82112
Malicious code in economiccuckoo0xrequest npm...
EUVD-2025-81996
Malicious code in excitednightingale0xrequest npm...
EUVD-2025-81926
Malicious code in fatfelidae0xrequest npm...
EUVD-2025-81917
Malicious code in federalmeerkat0xrequest npm...
MAL-2025-111265 Malicious code in yearling_mongoose_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfba906bc7ad0b458f12a31461cf333c64c0ba4482b2a9e5f3a31f4943d686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80899
Malicious code in previousgoose0xrequest npm...
EUVD-2025-80214
Malicious code in undergroundstingray0xrequest npm...
EUVD-2025-80430
Malicious code in stingystingray0xrequest npm...
EUVD-2025-82240
Malicious code in dependentguppy0xrequest npm...
EUVD-2025-80745
Malicious code in renewedhummingbird0xrequest npm...