Malicious code in testy_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f12f372aca5485a9ba3b8ddd023678410369e077ae3c03905c7ff092480e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-42225

Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8 Description An issue exists in SigningHub version 8.6.8 where incorrect access control allows attackers to create an unlimited number of user accounts. The absence of rate limiting enables attackers to exhaust system...