138 matches found
Malicious code in vina-sambalado78-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61913d3473da9743999af2ebc948dd6ee8cf88c4f4ec91e5553f7ff76b5787ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-114811 Malicious code in injured_mastodon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0779d07ba752cf7c7216afaed352fa557aef939d7399d2ae84f24833135b2110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-101890 Malicious code in effective_hare_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8991c2c0b48b54dc6ed6eb63c559d75ecdf44e6a794dbcf1a408996e4262fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kurnia-getas57-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ba48f4d8ad24feeb9ad86bbefc676809824ec34101297b328e7b4ed13a0e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dynamic_bison_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0551896f700eb638b16bc00f77015cb2a92731fe7168ce8c76476543ba1bff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-97313 Malicious code in warm_monkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d44860ad983196ce69cbd19950f166e279474d19589556d77b5d369fa7c7bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-93185 Malicious code in alert_eagle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad0a0773f82cd268655d01831ac60ef6de5c09f9908e6247ee6dc2c77da505c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in laila-bubursumsum61-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51702b67a3ffb7f00b2d5f2f32afab471781ac203ee41e2a72a47bf842e916b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mulyono-nasicampur82-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc937be92817203d83301fd3d8ec845afec9322e30b2edcff46d4848e0ad8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-75080 Malicious code in qori-ikan91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4d92ab5d7aa65e6c369cfec8c60f8a3be53bcfe34f77a74188e57b0fff492e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in painful-plum-flamingo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-65791 Malicious code in umi-tumis73-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f6cabd3fe5b16685cf930e81f7036852a6114b7d50cb1612157fc543f64ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in back_hookworm_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6d8780bdd0144e85248cd1e8ef24350aa7d7698a58b498f36d8e52d6d5b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59115 Malicious code in umi-mangut25-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfc768bef9d55a57347eb5db6d63ec0f2f467a7dc0c80f9456002d13fa79243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oktafian-dodol41-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe285f739373500dc85e32f8d7573a0fa5cf214e22b617e2fa009933d4848ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
OpnForm 安全漏洞
OpnForm is a form builder by Julien Nahum Personal Developer. A security vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from an improperly access-controlled unknown function in the file/edit, which could lead to a remote attack...
CVE-2025-11440: Improper Access Control
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...
EUVD-2024-16787
Malicious code in bioql PyPI...