2974 matches found
Malicious code in extra_marsupial_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1e32e185de61518c2cd1cd5600fc5c3286f8e3dc3f53cedbb76309cf7c508a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in extra_orangutan_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d9359433375a4b45e0b6ef45164b90be8402541b45338427f927fda499b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92103
Malicious code in extraleechz3n npm...
EUVD-2025-92102
Malicious code in extramarsupialz3n npm...
EUVD-2025-92101
Malicious code in extraorangutanz3n npm...
MAL-2025-113782 Malicious code in extra_marsupial_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1e32e185de61518c2cd1cd5600fc5c3286f8e3dc3f53cedbb76309cf7c508a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Remote Code Execution (RCE)
cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...
EUVD-2025-76893
Malicious code in extraguppy-silentdev npm...
EUVD-2025-71579
Malicious code in extracardinalz3n npm...
EUVD-2025-64149
Malicious code in extrasilverfishrequirement npm...
Malicious code in extra_slug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ef4963064b2065827642c7747e0f8328c7f6e257125760bf092cbe345179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-94405 Malicious code in extra_silverfish_requirement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb8f3fd61435fdc21f19a00fa70ad49063715e606ebeb926af82b263b223f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in extra_bedbug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a05037ad9d93eb481d53f78f6a3e29011a5de7e31bfafedb0691fab295595e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in extra-magenta-manatee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe99f06ff550f1b75c5a4b18a141cb83ddc971da3ac227a9f2b3a2053600d71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54454
Malicious code in extra-magenta-manatee npm...
MAL-2025-60437 Malicious code in extra_bobcat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c6e11012bbc4abdec6b25005d864ea8f01e80486a4adacb84de591fd97cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-47799
Malicious code in extrabonoboz3n npm...
CVE-2025-12613
Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...
