1748 matches found
Malicious code in ltd_dragon-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18171bdf9608a6d0ba14e8f5d7ed9c41ad821f4e0726935ae4bb106379ab9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78859
Malicious code in ltdcrowz3n npm...
Malicious code in ltd_bat_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc185899c336d2b561bd5cc5ebc4596c18f25d6492eefd3f8cad9b4c27f41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81326
Malicious code in ltdsquid0xrequest npm...
EUVD-2025-63219
Malicious code in ltdslugz3n npm...
MAL-2025-95335 Malicious code in ltd_slug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c34c53bc74e42dfbdd40919e42d6b854b9e5f07f6178cabc0ac0d721af736e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ltd_bedbug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29277cf25c24ce3b66698ce7013b8e95aaba375d0eb1c1c0b09f1648a448de0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53414
Malicious code in ltd-jade-mink npm...
EUVD-2025-53415
Malicious code in ltd-blush-panda npm...
MAL-2025-69233 Malicious code in ltd-black-leopard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69235 Malicious code in ltd-jade-mink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a429f4058f5bee023983b25c16906d5d4bfc5dc910ef0162fdb21e096f2d108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53416
Malicious code in ltd-black-leopard npm...
Malicious code in ltd_wombat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eceec661fc9809689d280120801f2b383953f7c9ea4809ca7950bdb04eca1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-46543
Malicious code in ltdzebraz3n npm...
CVE-2025-58152: Files or Directories Accessible to External Parties
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...
CVE-2025-57227: Unquoted Search Path or Element
An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder...
CVE-2025-49957: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...
PT-2025-41534
Name of the Vulnerable Software and Affected Versions Energy CRM version 2025 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can potentially send a malicious query to an authenticated user, potentially leading to the...