514 matches found
CVE-2025-15144: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function drshowerror/drexitmsg of the file /dayrui/Fcms/Init.php of the component JSONP Callback Handler. This manipulation of the argument callback causes cross site scripting. The attack can be initiated...
EUVD-2025-177370
Malicious code in paleoclimatology-jsonp-troposphere-nodejs npm...
EUVD-2025-180374
Malicious code in aquarius-jsonp-technocracy-bulma npm...
Malicious code in equinox-mira-jsonp-octans (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016d8d9305015c7fb0c76e6d70184deef29bca59073f821f8d6b36b6939254c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188570 Malicious code in parsec-oauth-jsonp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185468 Malicious code in antares-jsonp-charon-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175978
Malicious code in testcafe-markdownlint-antares-jsonp npm...
EUVD-2025-177312
Malicious code in parsec-oauth-jsonp-eslint-config npm...
EUVD-2025-176745
Malicious code in registry-readable-nucleosynthesis-jsonp npm...
EUVD-2025-178888
Malicious code in flare-backend-jsonp-orogeny npm...
EUVD-2025-177355
Malicious code in paleomagnetism-neptune-jsonp-postgres npm...
Malicious code in parsec-oauth-jsonp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176638
Malicious code in rigel-markdown-pdf-jsonp-restart npm...
MAL-2025-186778 Malicious code in epigenetics-dynamo-jsonp-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1342479f24440cb961a5f15859949333ba1dc3e69207d7407aef97806e766e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xenon-proxima-whitedwarf-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a57d1e9a393d211b58a86fd5f7c5e3a2c390cfb91db8a41ee8f156a303465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antares-jsonp-charon-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jsonp-hydra-neuromorphic-void (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846a84569f47fde495902906da6a1389c1da17054f67fd652782bc62b8bb6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176937
Malicious code in public-gacrux-jsonp-sirius npm...
Malicious code in whitedwarf-selenology-jsonp-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83a2580056cf6aa51868e0aaae0415ef996d229c5d8b9ab779a3fefa1ebfc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...