Malicious code in condemned_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4721b450de11ae2b52c04e1b799bf27b4eeabaf49535d28cd1b26cbebdbab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec082924c2c4d5e893bd61aeeddddb78091a9ce8fd35734929fa89207c788ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77407 Malicious code in condemned_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2197dd67efe8ed82a9c5e2c30f80c6abe249a0a2d7cf267f8e293e37396bde73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77405 Malicious code in condemned_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511e0e219c7bd38e27601b6dd316d19f7c2f9965cf155c163f8a2174f37e44fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55253

Malicious code in condemned-gray-cod npm...

EUVD-2025-55251

Malicious code in condemned-scarlet-pigeon npm...

EUVD-2025-55254

Malicious code in condemned-aqua-snake npm...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-silver-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b4632fb48604a62a2b7de2418e0ba3fce5146fd314745d457ed66394d434bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55250

Malicious code in condemned-silver-wasp npm...

EUVD-2025-55252

Malicious code in condemned-moccasin-grasshopper npm...

EUVD-2025-55249

Malicious code in condemned-turquoise-jaguar npm...

MAL-2025-67396 Malicious code in condemned-gray-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e92931de4d88364229356549d76a67b41493f5ad557e0784ee10628ff430e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50520

Malicious code in condemnedspoonbillz3n npm...

Malicious code in condemned_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9fbf6e0e9e8eec245ba8c0cc09efaa4965aa2eb6f7046ab1692c7016ece549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d7ea0c1cf081c40bb1b02e306fc9749c7ba38e68c1c1915b30ffab0197defd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit

No description provided by source. ?php / bbScript = 1.1.2.1 id Blind SQL Injection Exploit Bug found && exploited by cOndemned Greetz: All friends, TWT, SecurityReason Team, Scruell ; Download: http://www.bbscript.com/download.php Note: You have to be logged into in order to download this script...

Ignition 1.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Ignition 1.2 Multiple Local File Inclusion Vulnerabilities disclosed by cOndemned download: http://launchpadlibrarian.net/27567060/ignition1.2.zip note: magicquotesgpc should be turned off in order to exploit this vulnerability greetz: all friends, SecurityReaso...

LokiCMS <= 0.3.3 Arbitrary File Delete Vulnerability

No description provided by source. Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deletin...