Malicious code in anidata-huid-mav (npm)

Source: amazon-inspector 2c00caff71f6ade8980830b6d5432356f746f0dc9da3da8b406d33b87535778b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-143317

Malicious code in anidata-huid-mav npm...

CVE-2025-1797: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the...

PT-2025-9180

Name of the Vulnerable Software and Affected Versions Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217 Description A critical issue has been found in the system, affecting some unknown functionality of the file /wuser/anyUserBoundHouse.php...