MAL-2025-159262 Malicious code in makani-aiavamoba-ufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425d67ccf559a72e266ead1cacbf6131e1a102a45bb93cd93a2b84a4141a2464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151226 Malicious code in abiba-aluabai-ayabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4c4064be12948f3d3861a3ab72353907a5541fbedde265604d7039efbded75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a39e62db6a232acfc2756137a11a78de6ded64f135cd450433460d17484beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153619 Malicious code in azhar-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbb7e9141583e1da0db2ea8eeac24d7ad12df0077650383b78eb279dc1b4d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156843 Malicious code in iqbal-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc28cc48d7560fc5ed626b9118cea1e5ca2d6f0d2f1ee75e1c85f3037c1cfd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169810 Malicious code in uinsu-lisa-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca80f9168330ab863a4f1534479ca6625a48e05a7e14fdfe981e3345c65f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169831 Malicious code in uinsu-lisa-atubnma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238b5c9ac7509a3b125406a07a7a8a0d2b7b5bb1b31f6b1eacb0955862b373ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-119989

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

EUVD-2025-119990

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12871

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12870

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12871

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12870

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12871 aEnrich｜a+HRD - Authentication Abuse

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12871

CVE-2025-12871 concerns the aEnrich a+HRD product. The connected sources confirm an Authentication Abuse vulnerability where unauthenticated remote attackers can forge administrator access tokens and use them to gain elevated privileges on the system. The issue is attributed to the authentication...

CVE-2025-12871 aEnrich｜a+HRD - Authentication Abuse

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12870 aEnrich｜eHRD - Authentication Abuse

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

CVE-2025-12870

The CVE-2025-12870 entry concerns the a+HRD product from aEnrich. The vulnerability is described as an Authentication Abuse issue whereby unauthenticated remote attackers can craft packets to obtain administrator access tokens and then operate with elevated privileges on the system. The reported ...

CVE-2025-12870 aEnrich｜eHRD - Authentication Abuse

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...