50773 matches found
Malicious code in nodejs-csrf-sagitta-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176825
Malicious code in quito-fornax-dynamo-csrf npm...
EUVD-2025-180026
Malicious code in blitz-eslint-plugin-csrf-indus npm...
EUVD-2025-179666
Malicious code in comet-mutation-commitlint-csrf npm...
MAL-2025-188739 Malicious code in planetology-stratosphere-library-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadd62ef40f3b877824eeb1b48d4aef2ca574fcb0f1eb2abe17dc8802ac3c894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187047 Malicious code in framework-rimraf-buffer-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd7bd0d93981950b7dfc97b285205d98122fbf996356148515702794779a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186411 Malicious code in csrf-mutation-oauth-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187869 Malicious code in loopback-magellan-foundation-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9be3358b5196be685222ab977cbc9e55f402b2b9a88a7ef872d91c7115e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64482 Tuleap missing CSRF protections in the File Release System
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...
CVE-2025-64482 Tuleap missing CSRF protections in the File Release System
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...
EUVD-2025-119996
The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...
EUVD-2025-112916
Malicious code in hapi-prompts-markdown-pdf-csrf npm...
EUVD-2025-114164
Malicious code in elektra-fornax-csrf-csv npm...
EUVD-2025-111710
Malicious code in link-csrf-cressida-achernar npm...
EUVD-2025-114819
Malicious code in csrf-miranda-miranda-lynx npm...
EUVD-2025-114830
Malicious code in csrf-betelgeuse-cygnus-meissa npm...
EUVD-2025-114822
Malicious code in csrf-izar-resolvers-nightmare npm...