Cyan: HTML backlink vulnerability

Cyan: Versions 0.5.0 and earlier of Cyan contain a backlink vulnerability. This vulnerability stems from a link-following issue within the src= embedding functionality in the am CLI code block. localPath only checks the path text without resolving symbolic links. An attacker can provide a...

Malicious code in linguistic-cyan-slug (npm)

Source: amazon-inspector 73b78ee0b1685d9fe8525aecbcd709f8b7e2e3eac2de4972a3591ab0d630b72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in just-cyan-cockroach (npm)

Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intermediate-cyan-mockingbird (npm)

Source: amazon-inspector 110bb9745424c6a30f9d83cdfef2cc818200ac079190782f5d1b585e3ab98461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in individual-cyan-kiwi (npm)

Source: amazon-inspector f3254928a97f74e1c0cb5c402a5c1ebb2b700228cee8b97f5d504749684cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in incredible-cyan-jellyfish (npm)

Source: amazon-inspector bbe01ec4fc7dd208e4229b84eb5590bc6e46631dc9d794f2d09949987fa726f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in increasing-cyan-marmoset (npm)

Source: amazon-inspector e5a68ae0fc844cc3bcdf86a7972e5a30f74beb46f9dbd9bf05e84124af3c48a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in impressive-cyan-dingo (npm)

Source: amazon-inspector 0c9f97c25375a1cd52b5ca040c99572b1c35e30bf6fb1131f7eedfbf4071b565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imperial-cyan-raccoon (npm)

Source: amazon-inspector bbd637f1e0b9776e4858438e6422bdb6f460cd72525436975dc30f2cb413256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in immediate-cyan-flamingo (npm)

Source: amazon-inspector 414d9ed06493ec581ea18d94e84fea85f1d357887b08e923ad9175656a6b6fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in illegal-cyan-sailfish (npm)

Source: amazon-inspector 8966347552673faa80a9252c4e4e890b111e9f5ea81ff6d199ad61dab9045605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in handsome-cyan-hornet (npm)

Source: amazon-inspector ee095dddafdcb0a5d97dc601d3c82170043d130222d37f9567ae9b3bbdb1e972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grubby-cyan-prawn (npm)

Source: amazon-inspector bd90f43efa9b93528bde9f8764b2c67fd75a8ecdfdbe3719c9480b3df9cbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in growing-cyan-takin (npm)

Source: amazon-inspector 11cbb68e2952f8356fdf28bdfc1ba8c11c52c4154839fe258f313677e61c3c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in growing-cyan-condor (npm)

Source: amazon-inspector 420521703526d241e3712bf1a024b82445898a2b6c756c8f0f65051d386f21b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in great-cyan-koi (npm)

Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in global-cyan-hedgehog (npm)

Source: amazon-inspector d925ba9dc3c158cf84bea619a8c8dd7bed8e24f37665c762b5e47a245eb352d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in given-cyan-meerkat (npm)

Source: amazon-inspector 8172a67d864bbefc2fe1c2d690269f50ee2070cb5493c416cc89d630fa81ec7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in far-cyan-mite (npm)

Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in famous-cyan-crayfish (npm)

Source: amazon-inspector 8617cf7b6feaa67afe8b5adab20ecb1e5365143509da1518394888b92e894b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...