Malicious code in monthly-moccasin-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cf794d51bb25c9d6629c8dd65cce142b09bae0ab5c11e956859ab33f0f23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67080 Malicious code in broken-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb71e92456b15c3f9c80619c59a7f309a18c65d41f506f07108381cd5c058054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69465 Malicious code in modest-peach-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4394323375238f4ed22654659efc38396d1f9a6d637783288429de549a30775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48977

Malicious code in yearninglocustz3n npm...

EUVD-2025-50702

Malicious code in anxiouslocustz3n npm...

EUVD-2025-48555

Malicious code in brilliantlocustz3n npm...

EUVD-2025-47701

Malicious code in fantasticlocustz3n npm...

EUVD-2025-45810

Malicious code in possiblelocustz3n npm...

MAL-2025-58165 Malicious code in possible_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d78feab22bd48f98139f3424f6a7180aeffdb2cc2e5b60e5190501e6f496cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-0100

Malware in sbrugna...

CVE-2020-28364

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

appian-locust (>=0.0.2 <=1.7.0), exact-sync (>=0.0.39 <=0.0.40) +2 more potentially affected by CVE-2020-28364 via locust (>=1.0.0 <=1.1.0)

locust PYPI version =1.0.0, =0.0.2, =0.0.39, =0.0.29, =0.4.0, =0.5.0 Source cves: CVE-2020-28364 Source advisory: OSV:GHSA-VQXW-9PG7-V7V9...

Locust Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

GHSA-VQXW-9PG7-V7V9 Locust Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

m.desertlocust-crc.org Cross Site Scripting vulnerability OBB-2529808

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting (XSS)

locust is vulnerable to cross-site scripting XSS. An attacker can inject and execute malicious script in a user's browser via the host parameter through the web UI...

CVE-2020-28364

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

CVE-2020-28364

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

appian-locust (>=0.0.2 <=1.7.0), exact-sync (>=0.0.39 <=0.0.40) +2 more potentially affected by CVE-2020-28364 via locust (>=1.0.0 <=1.1.0)

locust PYPI version =1.0.0, =0.0.2, =0.0.39, =0.0.29, =0.4.0, =0.5.0 Source cves: CVE-2020-28364 Source advisory: OSV:PYSEC-2020-60...

Cross site scripting

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...