Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-hentai-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33802908c2a6d4ea1409665ab1162beb505eb2682f60cd4af71d9c043078015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147690

Malicious code in tobrut-hentai-a npm...

Malicious code in guras-a-koreaselatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aa56a4b1697561d310563259b5eb852b60b232b4221213422908d7d8ae8d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-119990

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12869

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...

CVE-2025-12871

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

PT-2025-46573

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The a+HRD software contains an authentication issue that allows unauthenticated remote attackers to create administrator access tokens. These tokens can then be used to gain access to t...

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD that stems from authentication abuse and could allow an unauthenticated remote attacker to send specially crafted packets to obtain administrator access...

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD, which stems from authentication misuse and could allow an unauthenticated remote attacker to forge an administrator access token and elevate privileges t...

CVE-2025-12869: Improper Neutralization of Input During Web Page Generation

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...

CVE-2025-12871: Weak Authentication

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12872: Improper Neutralization of Input During Web Page Generation

The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL...

CVE-2025-12870: Weak Authentication

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

Malicious code in riana-kue22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa68403d1f9abd1de8cbd9250b65778a0897a86439ea057c2f1d141a756f813b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-tek6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aece64ee807cf61837add4f6f08be3074521337b63e42ef9b1f49f4ad4efd2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129784 Malicious code in riana-rangi75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9df436688374cb43afc6227eaa4be33cce45f1eeeb8c721785b9fc24b4bb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127223 Malicious code in hissing_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4be41fd3c2c1842edfb8f6fb52f5c2040fe9b5167bb8bb9eec5c6caa45dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gorengan1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96939d7141320dc30f055957e5d0a4b9478006afe4cc968e8c6dd2a8951d2a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108011 Malicious code in riana-getas82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eca9b101118dd5e4fa9a6daece4aea3aca7bae6a580780e2acb9174290391e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...