1722 matches found
Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort. "The packages were systematically published over an extended period, flooding the npm...
Like Tea SQL注入漏洞
Like Tea is a multi-store tea drinking applet open source by comeasy. Like Tea version 1.0.0 SQL injection vulnerability exists , the vulnerability stems from the file laravel/app/Http/Controllers/Front/StoreController.php in the list function of the lng/lat parameter is not handled properly ,...
MAL-2025-160631 Malicious code in modirai-igafo-jagagg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee84eca96aa6db47fbe5a6606d22a59739a8dbc6428a559425fada47175d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in balanced_sparrow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e24711d3d59eeac4af2ca568a0fb37438fe58d2144d08891db6a996185274bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74490
Malicious code in likescorpionsilver-76 npm...
EUVD-2025-78899
Malicious code in likebonoboz3n npm...
EUVD-2025-78898
Malicious code in likelionz3n npm...
Malicious code in like_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3a4d7620e2971b687a7ebbf4bad24b5c7755fa15b49b2e4b080e10c891666d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81380
Malicious code in likecaterpillar0xrequest npm...
EUVD-2025-63304
Malicious code in likefalconz3n npm...
EUVD-2025-63303
Malicious code in likegoosez3n npm...
EUVD-2025-85030
Malicious code in likeearwigz3n npm...
EUVD-2025-53501
Malicious code in like-green-salamander npm...
EUVD-2025-53500
Malicious code in like-maroon-wren npm...
EUVD-2025-53499
Malicious code in like-turquoise-tuna npm...
Malicious code in like-green-rooster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecae3c0a4fb367b20a13645a16a2f5c704bbf04448166dcc860afb7bb10864d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53502
Malicious code in like-green-rooster npm...
MAL-2025-69147 Malicious code in like-green-rooster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecae3c0a4fb367b20a13645a16a2f5c704bbf04448166dcc860afb7bb10864d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...