16893 matches found
CVE-2025-64752: Server-Side Request Forgery (SSRF)
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
EUVD-2025-137415
Malicious code in imalok-ofe-a npm...
Malicious code in imalok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d74b001422dfb69cf1a9df82c264d2ec65893db4edac2e3475812a5837fc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlokok-lofei-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b321b72ebcdbe6ffd99acc812534d90b178c328d151618b7d81112a98de416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlokok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb17455f65253ba6be5fab612a797aa6f0433340a49ab2fdfcc8da3e2b595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlook-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in a-pem-misa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ceef2f7df03c24fc249dcfbd60e7876462e0f5ee7c613d84dff849cae53728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fafunig-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf33d71b8a5bd4ffb25a0d71666b0dedffc0f19b9f3467800845a6aaddd5f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-faifg-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a3e985b388ca6fc8c57dfdb3b32577fdbffa3c94dc6fb611983d6fcc356fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fg-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46468bfb5cfd47976fbc8cdff4da8191324ef299f794e9281bce5fd7a9162d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134429
Malicious code in kisut-faig-a npm...
EUVD-2025-134428
Malicious code in kisut-faig-a npm...
EUVD-2025-134390
Malicious code in kisut-fanig-a npm...
EUVD-2025-134388
Malicious code in kisut-fg-a npm...
EUVD-2025-134387
Malicious code in kisut-fg-a npm...
EUVD-2025-134384
Malicious code in kisut-fig-a npm...
EUVD-2025-134383
Malicious code in kisut-fig-a npm...