MAL-2025-178390 Malicious code in sahnim-satg-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a543351a017d6549a83cca005e23a84a2f6b016cab666361f44d89d790d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136921

Malicious code in sahnim-satagi-a npm...

Malicious code in sahnim-satagi-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8eaf0c026ebbb0b408cea1a964da84a8283fd195f680ebdd4e31195b9d2357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136923

Malicious code in sahnim-satag-a npm...

Malicious code in poglymer-ogaih-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2decd97377400ad637367b6f6408f3773374be6e7147d41b9dced733146f5517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satg-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a543351a017d6549a83cca005e23a84a2f6b016cab666361f44d89d790d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136901

Malicious code in sahnim-satg-a npm...

EUVD-2025-138561

Malicious code in polymer-afavof-a npm...

Malicious code in sahnim-satag-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284be2e04b9739016d09548660b310d8e662f055ca8c5878f11c6a36d42cf5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-2a-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13c83bd84fdf3849858ed0344fbd3272e30c4fca0a34af23e0c0ed0b324f33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-a-koreaselatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aa56a4b1697561d310563259b5eb852b60b232b4221213422908d7d8ae8d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-hentai-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33802908c2a6d4ea1409665ab1162beb505eb2682f60cd4af71d9c043078015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-guta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a808fa4bd39b3275439ec242ba28e51d6b7b6bf5129d8cbe5eaf3a82a9866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147690

Malicious code in tobrut-hentai-a npm...

EUVD-2025-119990

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12871

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12869

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD, which stems from authentication misuse and could allow an unauthenticated remote attacker to forge an administrator access token and elevate privileges t...

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD that stems from authentication abuse and could allow an unauthenticated remote attacker to send specially crafted packets to obtain administrator access...

PT-2025-46573

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The a+HRD software contains an authentication issue that allows unauthenticated remote attackers to create administrator access tokens. These tokens can then be used to gain access to t...