UBUNTU-CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

CVE-2025-11687

The CVE-2025-11687 issue affects the gi-docgen library and is confirmed by multiple sources (GHSA advisory, NVD/Red Hat entry, Debian/Amazon Linux advisories). It is a reflected DOM XSS vulnerability where an unescaped q query parameter allows arbitrary JavaScript execution in the page context, e...

CVE-2025-11687 Gi-docgen: reflected dom xss in gi-docgen

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

EUVD-2025-206336

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

CVE-2025-11687 Gi-docgen: reflected dom xss in gi-docgen

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

EUVD-2025-137590

Malicious code in gociy-ng-gi npm...

EUVD-2025-140335

Malicious code in mahiya-sutu-gi npm...

EUVD-2025-138181

Malicious code in polymer-gi-aga npm...

Malicious code in polymer-gi-agaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e945b933428acafb2f9e506d23e9e0360e32414f1713c79601a8b2b211ef532e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138171

Malicious code in polymer-gi-agjagfkaf npm...

MAL-2025-175926 Malicious code in mahiya-sutnu-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67447655d762b9554840e382f18d68467052a114e6f8968d7686eff27f568208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140340

Malicious code in mahiy-sutu-gi npm...

EUVD-2025-139051

Malicious code in poglymer-gi-agjcagfkaf npm...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140344

Malicious code in mahiy-sutabu-gi npm...

Malicious code in mahiya-sutnu-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67447655d762b9554840e382f18d68467052a114e6f8968d7686eff27f568208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-sutu-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4772da62829322224ecc4994012ae83f2e76c5d163435a41c0cf1312cc88e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177961 Malicious code in polymer-gi-agagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f2782228bb71f5d4189adc913d741bc8bc9b1b71e1a690a3fd446de65b49b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177959 Malicious code in polymer-gi-agaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e945b933428acafb2f9e506d23e9e0360e32414f1713c79601a8b2b211ef532e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...