Malicious code in putra-gudeg37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9771884a3f86529c8955a9ce020fb8d850986a8e3e6adbae59c965e7f03a1610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-liwet11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab97d0b11e10b1177f11c7eaad97f2117d52ac70251328cf219fcb6116f268dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mangga96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee65e78fc3b135d7f41b4dc3b5174521bdb92ec06d3d6bd6248b404971cc888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccbdb0aa947d8179a21562d14f42f3b20cf819cfb7574cb38b1ac555974ab54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a7cbe3203a2c7cbc5606bd6fe590cbc73bb78bb9a1fb7fac3ae18cd7130786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mendoan3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5b3981254bd2305c46a2584be2b99599efbfb30658de8a00fd40e60c1f26ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-telurtahu24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ba8a7e4c4986833e98ae1aaa7335d41414d395d2045cb6baf0a732272a28d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62571 Malicious code in dirty_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9432ba54b96faf86af72c23b73f2002d836893f48a0637bd1c6718214dc15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61768 Malicious code in ade-saguer81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ba1ee4dfecb08d4ea8a3f4639421609e4e2020b319461ca3ed780ab64d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63933 Malicious code in kurniawan-nasi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc06d52bbf5e1cc80ea157fcdac95c90d775882ed6b845c6e2a10ae0f05688d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64932 Malicious code in putri-ragi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e3773d109184289fddb333ecba7fa2ebcc8f03c98d2dca031372ba0b10fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63325 Malicious code in hanafi-tahutek57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04196f1d88c91f0616f737286859c72ee9eb82d8ae25c86192242d645b79aa02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61956 Malicious code in assistant_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1492098d9b9738a3d15e297a9014614a987af47deeb7e1b849cd6cfff765c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64276 Malicious code in maya-kue4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e105035efec0f84a16a3f8c9c52d0605c1f90b805769a881460c41185b53e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47773

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is edited via an AJAX call. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

CVE-2025-47286

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on i...

CVE-2025-47773 Combodo iTop has XSS vulnerability in /pages/ajax.render.php

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is edited via an AJAX call. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

CVE-2025-47773 Combodo iTop has XSS vulnerability in /pages/ajax.render.php

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is edited via an AJAX call. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

CVE-2025-47773

Combodo iTop is affected by a cross-site scripting (XSS) vulnerability in the dashboard editing functionality invoked via AJAX calls. The issue affects versions prior to 2.7.13 and prior to 3.2.2; versions 2.7.13 and 3.2.2 are reported to protect rendered HTML content. The root cause is an XSS fl...

MAL-2025-61229 Malicious code in sad_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44bdef4597e01aac3ccca65a6e629cf4fba52527e38cbd85c3a69c0e01840e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...