aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD that stems from authentication abuse and could allow an unauthenticated remote attacker to send specially crafted packets to obtain administrator access...

PT-2025-46572

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The software contains an Authentication Abuse issue that allows unauthenticated remote attackers to send crafted packets to obtain administrator access tokens. These tokens can then be...

PT-2025-46573

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The a+HRD software contains an authentication issue that allows unauthenticated remote attackers to create administrator access tokens. These tokens can then be used to gain access to t...

PT-2025-46658

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An issue exists that allows an attacker on the local network to gain access to a user account by performing an arbitrary number of authentication attempts with different...

Malicious code in lutfi-sasag3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aca58b6ec9bef74eb8e349d4c4df616bbaa8b1580e7982985f272b9fba0a4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b039b6ff80dd37d37bc6ed5dfa3812beb33b1704568aa7b3e40db8c336c8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-taiwan38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fb3c3caf6168e01329128a4f107334f4ba9b3d8864044ba8eec4e9fcfceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad2b2d41bb24ccf6bdb533689672298df00b70b8fd03997a0d9b2e0842680cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cbe94a8a555f1242cb985ab6cd19921ede8a805409e614fb47a8f8ed52f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-mieayam3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183a92350b903129de706ef63fa2b57df427f9714d10e355057d5facac0d5d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296e63a4a271976f253bea25f84e679a3e31b25793f3e04a6cae8c6caf005560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-keripik75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23da93cd7a2982826f2c4ff40966c59f7745cf503af2f36696634b0e85ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bbcd18db4c944bbac16547e87e85525048336cb243cbda62423ae7df16c8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40182d47e0675cd08e2dcdd264b9c7b6eb9e4a33e3b5d0ab0ece8c81dc82369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ce03dc52e950103f5592a38299827ec7ad6d4bfa8876bcae14ded200d211f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136569 Malicious code in riana-donat39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5629de9a06bec612fa3a9af94113e056ffaad1c97d85f93dda114347f31e3ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132824 Malicious code in dian-mendoan44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83ec6c6214fb4f617ed8c15bf69df85d2332260e1bb0552e959dfe5824fc4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133093 Malicious code in embarrassing_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a1de4b5a541c9d1a9905eea1711b0e2ca7d4c7637885f5a3f81587c2b3f1f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133875 Malicious code in gita-soto95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a043f344a0f444eafa4d4694f9df5ef0e09389fa8965dd5d86dd52386e322ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134929 Malicious code in kurnia-brongkos86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d521a6f7dffa4bee64d9b30b791ca08afa9fbbb0914179ecf9e154f87d3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...