Malicious code in condemned_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec082924c2c4d5e893bd61aeeddddb78091a9ce8fd35734929fa89207c788ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4721b450de11ae2b52c04e1b799bf27b4eeabaf49535d28cd1b26cbebdbab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77405 Malicious code in condemned_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511e0e219c7bd38e27601b6dd316d19f7c2f9965cf155c163f8a2174f37e44fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77407 Malicious code in condemned_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2197dd67efe8ed82a9c5e2c30f80c6abe249a0a2d7cf267f8e293e37396bde73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55249

Malicious code in condemned-turquoise-jaguar npm...

EUVD-2025-55254

Malicious code in condemned-aqua-snake npm...

EUVD-2025-55250

Malicious code in condemned-silver-wasp npm...

EUVD-2025-55251

Malicious code in condemned-scarlet-pigeon npm...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55253

Malicious code in condemned-gray-cod npm...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-silver-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b4632fb48604a62a2b7de2418e0ba3fce5146fd314745d457ed66394d434bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55252

Malicious code in condemned-moccasin-grasshopper npm...

MAL-2025-67396 Malicious code in condemned-gray-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e92931de4d88364229356549d76a67b41493f5ad557e0784ee10628ff430e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50520

Malicious code in condemnedspoonbillz3n npm...

Malicious code in condemned_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d7ea0c1cf081c40bb1b02e306fc9749c7ba38e68c1c1915b30ffab0197defd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9fbf6e0e9e8eec245ba8c0cc09efaa4965aa2eb6f7046ab1692c7016ece549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities

No description provided by source. LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install' 14. 15. $include =...

bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit

No description provided by source. ?php / bbScript = 1.1.2.1 id Blind SQL Injection Exploit Bug found && exploited by cOndemned Greetz: All friends, TWT, SecurityReason Team, Scruell ; Download: http://www.bbscript.com/download.php Note: You have to be logged into in order to download this script...

Ignition 1.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Ignition 1.2 Multiple Local File Inclusion Vulnerabilities disclosed by cOndemned download: http://launchpadlibrarian.net/27567060/ignition1.2.zip note: magicquotesgpc should be turned off in order to exploit this vulnerability greetz: all friends, SecurityReaso...