CVE-2025-65952 Console is vulnerable to path traversal regarding custom assets

Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This...

CVE-2025-65952 Console is vulnerable to path traversal regarding custom assets

Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This...

PT-2025-48096

Name of the Vulnerable Software and Affected Versions Gorilla Tag versions prior to 2.8.0 Description A path traversal issue exists in Console, a network used to control Gorilla Tag mods and users. Prior to version 2.8.0, specific combinations of backslashes and periods can be used to bypass the...

EUVD-2025-102739

Malicious code in quarrelsomegorillaz3n npm...

EUVD-2025-104240

Malicious code in leftgorillaz3n npm...

EUVD-2025-104411

Malicious code in itchygorillaz3n npm...

EUVD-2025-74367

Malicious code in philosophicalgorillaamaranth-54 npm...

MAL-2025-112463 Malicious code in wealthy_gorilla_blush-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baff912a9537343d75fcea89d3541e4b2fe5ab1286ade18cb3566638e6b20722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77140

Malicious code in defiantgorilla-strongdev npm...

Malicious code in defiant_gorilla-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabdc8802ec5096a407e1e55ba6dba4155829fea2dc83c980e4f94cec9a0d55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77287

Malicious code in complicatedgorilla-silentdev npm...

EUVD-2025-75165

Malicious code in yawninggorilla-appteadev npm...

Malicious code in smiling_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9285c993f03b7878b73df8fe3252524b28fdb6dea7a916686045e7f142cac808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79230

Malicious code in financialgorillaz3n npm...

EUVD-2025-78063

Malicious code in uglygorillaz3n npm...

Malicious code in financial_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239fd78574352eaf0d74acf14dc95236ccc77bea2490f4091e9af4f210db6922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78671

Malicious code in ordinarygorillaz3n npm...

EUVD-2025-82469

Malicious code in collectivegorilla0xrequest npm...

EUVD-2025-81816

Malicious code in generousgorillareplicateautomation npm...

Malicious code in collective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2ae5eef66174bd41a26af1a803922883f596c5b4e88349cb73d4854090d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...