278268 matches found
CVE-2025-41107
Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...
EUVD-2025-74561
Malicious code in hungryfoxgreen-61 npm...
EUVD-2025-74162
Malicious code in territorialhalibutindigo-40 npm...
EUVD-2025-74858
Malicious code in blondebuzzardamber-68 npm...
EUVD-2025-74476
Malicious code in magnetictortoiseaquamarine-11 npm...
EUVD-2025-74467
Malicious code in medicallungfishblush-7 npm...
EUVD-2025-76570
Malicious code in indirectcapybara-apptea npm...
Malicious code in yelping_lemur-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in low_marsupial-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc358be3bdb621ef5306b5a4cf983279447c27d66cb7cd955ec3525cd392c61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76976
Malicious code in endlessparrotfish-appteadev npm...
EUVD-2025-75904
Malicious code in qjakal-devapptea npm...
MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74973
Malicious code in awareminnow-gooddev npm...
Malicious code in worrying_orangutan-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7212dcb17a3e4d14d8784f8afc870855e5c74fca6bc93e5381542d37b679131e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-109810 Malicious code in tragic_albatross-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110070 Malicious code in unemployed_cat-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-103056 Malicious code in garducctv-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76545
Malicious code in instantcrab-appteadev npm...
Malicious code in large_raven-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...