18857 matches found
Malicious code in smart_jellyfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e033e5959b4766ba06ceb7288893d273e59931634f70e2ec00d0fcbe9f4a787e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gita-enting56-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420242934b67b2deae776414f9f01a2743d154db14adb678748cb49a1f40f0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wawan-lapis22-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1b6954f3645086d6ef0d4e432dae2894399a3162619c944586d43c2fe8db0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in emotional_wildebeest_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ad784a184df3c87e26976ca6e0c1ef16c91c7946a3f27068f133594218135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in statutory_scallop_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1ba2c8440169121d2fce3fd83323ba6267be1f26c7b5395e0245a0ecff3013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rear_lamprey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd52d63b563590d4e0831cbecf4b049b87269253bbe02d92cc0adb4444be041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
XPath Injection
smolagents is vulnerable to XPath injection. The vulnerability is due to insecure XPath construction due to searchitemctrlf concatenating unsanitized user input into XPath expressions, allowing attackers to inject XPath to bypass filters, access unintended DOM nodes, or disrupt web automation...
Malicious code in current_lark_crimson-5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in whispering_moth_crimson-56 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec77cbfec95aaefdf6932d0848ed4a0dbe938a0793d0c67b1a71bed2a8e4ff4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dominant_tarantula_ivory-66 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d8bd512354654e0cfdda6119675e2758ae7f2ddbe2cd473861d54c09fed980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ideal_crocodile_blue-74 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbe37fd8090781a3917f769fac7452ff529d0dad306029ac9cac0a7e5e407d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in respective_salamander_amethyst-57 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4732193a365b795a76d14c67b280a999744de63cc15da083f3d9e2dc98972c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-111843 Malicious code in efficient_macaw_moccasin-85 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab18adee367ca04e1198d92a2ef2a1b8318fb9b98cfea9385cf8856067df810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-112482 Malicious code in xerothermic_yak_coffee-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76676
Malicious code in healthyjunglefowlreplicateautomation npm...
EUVD-2025-76888
Malicious code in extraordinarysharkreplicateautomation npm...
Malicious code in seblakkuah14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513bd3508037328aebd647dac2012a5ae9651f3ea47fe83607319cd6ee2d5017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in misty_mule-teagooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d696f04167daf7d634f6f7e0b1e59f57937b64b28d794bded8ffe84da33cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...