MAL-2025-139110 Malicious code in weekly-salmon-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

FoxCMS Cross-Site Scripting Vulnerability

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS. FoxCMS 1.2.16 and previous versions of the existence of cross-site scripting vulnerability, the vulnerability stems from the file app/admin/controller/Product.php parameter Title on the user-provided data...

Malicious code in established_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2d21ea766122942bf5e931f4348ef567a71ceb775c21bf8ed5e780c98670be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102972

Malicious code in properfoxz3n npm...

EUVD-2025-95106

Malicious code in shiveringfoxz3n npm...

EUVD-2025-106033

Malicious code in commonfoxz3n npm...

EUVD-2025-104497

Malicious code in innerfoxz3n npm...

EUVD-2025-74252

Malicious code in shinyfoxamaranth-13 npm...

EUVD-2025-74561

Malicious code in hungryfoxgreen-61 npm...

EUVD-2025-74721

Malicious code in dustyfoxamber-42 npm...

EUVD-2025-74846

Malicious code in brightfoxsilver-92 npm...

EUVD-2025-75490

Malicious code in surprisingfox-appteadev npm...

MAL-2025-109349 Malicious code in surprising_fox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffb767bd7df5ca4c6f921c108a23d09cfe46bd701d22b10dc8da76c1a6a4cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c05ea333f0daf7fb42c60283c384d08e66495f8ccdbc1f25ec0ae059c22aad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79501

Malicious code in criticalfoxz3n npm...

Malicious code in grotesque_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f990504345208fc3b708d8713b15b2720e66d2895b7342aacea0d0da500661a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78794

Malicious code in miniaturefoxz3n npm...

EUVD-2025-79389

Malicious code in dizzyfoxz3n npm...

EUVD-2025-79199

Malicious code in freefoxz3n npm...

MAL-2025-104432 Malicious code in isolated_fox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d899afdded473421da61c579b945728242c09109efb341cdac76f1b75fda7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...