Malicious code in nana-telur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4f4cef6f52723c3603f6e5e90b0395422af015a85e9fe696de32bf2015c1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kupat85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fe60a17e9c6f77dcb6cd426ac87bc2185419802f37088468c20b28c5716e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mangut45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c365f589478fac5cd76c054e0bace9266474313ee605cd87190c8642f888d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12931

CVE-2025-12931 concerns SourceCodester Food Ordering System 1.0. The vulnerability is a SQL injection in an unknown function of the file /routers/edit-orders.php caused by improper manipulation of the parameter ID. It is exploitable remotely, and the public exploit exists, enabling an attacker to...

EUVD-2025-41745

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12931 SourceCodester Food Ordering System edit-orders.php sql injection

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12931 SourceCodester Food Ordering System edit-orders.php sql injection

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

Malicious code in ade-sate1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85b8b2d4ec997f4179c6deca76078664e502a43fdc82ab564fa42d71ad8d5b6 The package ade-sate1-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Malicious code in candra-tiwul20-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e10ff0d3a0d0d1aae0c46925243fafb86fc8a48acc633987ee806b98b897141 The package candra-tiwul20-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in arif-serabi93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c428b65b3b3097d85d08f5c49f5a46676ebcac6d1cb69051e4d103b386e031db The package arif-serabi93-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50659 Malicious code in vida-sego26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0462f8cbea853f62ade71423671e51aac033f7c2e5665a13803fed4a4ad12b2c The package vida-sego26-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in dono-kue76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813fa1ed62f9149e8152cf6bacbe85ea9aa3be51dfb72707c97531d6cecc74ee The package dono-kue76-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in budi-lutis83-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434c78453cc63e02969cc7c5196fc8368f3e1905becb995eb6d555ed5cfecb95 The package budi-lutis83-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51839 Malicious code in fajar-semur85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2beba09d09acbfadb3af4a0dc80a65a5bae3044b324e5cabd2f2fd46d10b6b62 The package fajar-semur85-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in andi-takokak49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a35bcb3f4dc59af64d5b969b0d90fcdd89b90f9197b84562781b11397ef0d6 The package andi-takokak49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in fajar-mangut61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aa55042889d0042a7a4f0ab7b968ba58df284820aa9e56fba5a624884d934c The package fajar-mangut61-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in citra-kue19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e6eebba4ec8d70e4515939afb3f51b2320daea3f0e19cb4e532d8d2c3d322a The package citra-kue19-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-52387 Malicious code in tania-mangut17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc24569c4fd93ae0c78bcb602d38d0984b6af17dc9726b32d5f717226068bc2 The package tania-mangut17-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

EUVD-2025-38722

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-46182

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.13 Combodo iTop versions prior to 3.2.2 Description Combodo iTop is a web-based IT service management tool. An administrator can execute code on the server by editing the configuration of the iTop instance in...