MAL-2025-50118 Malicious code in cindy-tempe28-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e01cba2a8dc63548f2c201166b845f3bec6d173cd2a9825460b100f1bc33ffa The package cindy-tempe28-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50787 Malicious code in andi-bubur22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f161916989ab49146ebcb936b3de1f5039f26f93bce67c58413b94887bd0eb The package andi-bubur22-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-49955 Malicious code in budi-mie64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3bd10e5af46825afe47d0f0c4f88ad864729b6c1ab47929a7a856e9f7784e8 The package budi-mie64-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-49765 Malicious code in agus-tek5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6a1ab7df654ef7ffdbc43856c53b52de8ec16b50711a835965e9cbb344f379 The package agus-tek5-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...

MAL-2025-50040 Malicious code in cici-getuk66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48354e36d2528b1e5aa4050ed92f0a77176637789d92e541cf9f4f3cc76660 The package cici-getuk66-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50206 Malicious code in dewi-bika3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038328f5b368be133a9b605cbd80011efcb7b33558219d02c63da5166416d9b7 The package dewi-bika3-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50910 Malicious code in bambang-oncom65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fb8e0074358c51ca132ea7d2079ea9dcb7d4e4c8fbe9270ecc388893879fd0 The package bambang-oncom65-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52637 Malicious code in vida-kue30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a653640108d823fb5b79d3edbe710cfae6ebb0cbdc3f18c600c69b0aee3ec9a8 The package vida-kue30-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

PT-2025-6112 · Unknown · Zoo-Project

Name of the Vulnerable Software and Affected Versions: ZOO-Project versions prior to commit 7a5ae1a Description: The issue is related to a reflected Cross-Site Scripting vulnerability in the ZOO-Project Web Processing Service WPS publish.py CGI script. This vulnerability occurs because the script...

ZOO-Project 跨站脚本漏洞

ZOO-Project is an open source processing platform from ZOO-Project Open Source. ZOO-Project suffers from a cross-site scripting vulnerability that stems from the publish.py CGI script reflecting user input for the jobid parameter directly into the HTTP response without HTML coding or cleanup...

PYSEC-2014-59

Multiple open redirect vulnerabilities in 1 marmosetpatch.py, 2 publish.py, and 3 principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...