CVE-2025-64523 FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

Malicious code in buis-manuis-boaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9baca5bc99b77b896ef5cd9725ee8c4cfb0cb3448455fcf6fbff7ee36022af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanur-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871f0078a96c58ba1448967d257c97a2d2869066bbaee88ea0e2a333ee5f943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6248cd617bead739d3da1ac6d2b8fe6b2746add565c6ab4b9cd7604ae97419f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177475 Malicious code in poglymer-ognagah-agsashohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefcda8dca78fefc51cbca27e3d8df1eac83c9442d665f0d7bdb0e502f5435f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172916 Malicious code in anidata-hadits-rispa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168c55d6fafa727dd08f8bcc4b35b694aa48928af125a25634068dabb54de5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173456 Malicious code in buta-fippoa-inaofufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3a3f71420bae11ffff2118a968e0925f09bf13cdb1b22fc408fa5cb2777630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3c94fb08aac6b7c61397bbfca80d28e2d040d70f8f401be2559d57b51029e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aiun-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17bbf3893de1d4848a248bfa69a87fed300cc9606459f263bdefa40bc6b178a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-nguy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dec6dd05dac813c9e303f620294c4109d49f88ab393f921bb2eaa69bd913279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3d93c4c695452d73e38e8881e871ca03ef7724a83884e398539bc648b77771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155688 Malicious code in hariyono-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618650488eb55ee940f7cf0fe2478240c4105342a1f30316e4e5cf3f2186679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156529 Malicious code in intan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf73f43860555012c3c7bfbfabe7db726f4a4145291c446a5345071d8342aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162890 Malicious code in nokire-loklok37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1011dd807aebc9946e6370e01b5834272d67abd9a89507e143d1d004a4f2b1c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404cb1c2c3bd5a66d13e91931ac180faa4d79a80000142b715dac00ec111ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152662 Malicious code in andriani-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a2aa503ccae8d3704baa8cecbcd534bfe496f5c491923142c5eb8c0d624ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163329 Malicious code in nokire-rara40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765ada07df74e78edf17b5f7d303707701238886de0481569e33d68a7c4b144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151750 Malicious code in aciyua-idust-dajauagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9487caed4f88c06300e56c16fce2b5ecca63687c378293fb671bbd954db6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-mivafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3477bc53f65d004f3956522cb39b04bb3492f4de77ffd5733b15f177a03cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...