SourceBans Material Admin 安全漏洞

SourceBans Material Admin is a game server management panel tool developed by SourceBans Material Admin developers. Versions prior to 1.1.6 of SourceBans Material Admin contained security vulnerabilities; these vulnerabilities allowed attackers to manipulate arbitrary user data in web application...

CVE-2026-33549

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...

mysql: DML unspecified vulnerability (CPU Oct 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

Malicious code in teate-thy-sonic-ejte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67340ed58777d7c37fe2cb9a9a6edef6a0d39117b535564f361e5a1bcc2b5607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafigfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e309fc6b076251b203ae614a2af7e1055e9d90ab5459fdc7a0d0f0d4920837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175293 Malicious code in kapvino-sof-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d1cd66002ad67c50bdc75a06e70cd2e163e4add1d4dd1f5b32fc84467be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173466 Malicious code in buta-fna-fnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ff74a699a3012d9434ec9e64de1d3a8f4c5954c98d07081f0d76e482fce9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171152 Malicious code in emilythomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9befe28e80b03ce38c96ffe22b4492df0feff351ff3240a2c2550daa1ff73bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171102 Malicious code in deirdremurphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f017c0f73882d9a27f465f61bdb297712f0abe6f24389643da91d3f7cf849f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in 12-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31ad8d7d3f2d8543dd80077bd3b9229214b829733d907c7288a5a7babe5a617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163593 Malicious code in nokire-zabuza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c2e3685fefd83c7080e3c59848c308ffd49abe31fdf50f44327aa5e2b5023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhfdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f36ac86db504976833359cc15098977d71a32fb90ff71ca54aaf82988e6de61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d361523e299252e15f5761f90e3fc9eb718f43865284b42408a520ef885ba517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b8ede0c8bb74be245fd49dfeeec51ab3de1ed9f78cf19864421ec0a0b29ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130752 Malicious code in udin-liwet76-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5a0edc01da0b6bc8b9eaec4bfc0f485ed55876b227e80f3270d8162786e6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128799 Malicious code in naked_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f795b10fc64b8913a9f59ee787dc4dd0371fec57cbbf60a5331b97094adc2d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fdb3bafbee1554bb2476c6fd74461099c2579652510f2f2d6d1385734b4fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-menjes50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31868d050833f7ed5da20e44374ef882f2445a5faf1ede6d7651c58d43d8bc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...