664 matches found
Malicious code in original_mite-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a214f1f8468fa84e0757709c80f1ff527c0fdf1a54b687ffccb8facdb3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76101
Malicious code in originalcow-appteadev npm...
EUVD-2025-67930
Malicious code in originalquailz3n npm...
EUVD-2025-67931
Malicious code in originalelephantz3n npm...
EUVD-2025-67928
Malicious code in originalswiftz3n npm...
Malicious code in original_elephant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8c88913a8baa17599492fcdb38f6d22cde0dab69e7b31c371f9144b1b8a3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89326 Malicious code in original_swift_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9972986b572a54d240417bc01fe838527c8d409c207a1a1abf9bfbc6e7e3929f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-67927
Malicious code in originalvolez3n npm...
EUVD-2025-52891
Malicious code in original-indigo-whitefish npm...
EUVD-2025-52892
Malicious code in original-gold-dragonfly npm...
EUVD-2025-52893
Malicious code in original-amethyst-jaguar npm...
Malicious code in original-gold-dragonfly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-57894
Malicious code in originalwombatz3n npm...
EUVD-2025-49680
Malicious code in originalreptilez3n npm...
AndSoft e-TMS OS Command Injection Vulnerability (CNVD-2025-23563)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of parameter m in file /clt/LOGINFRMoriginal.ASP, which can be exploited by an attacker to execute operating system...
AndSoft e-TMS Cross-Site Scripting Vulnerability (CNVD-2025-23562)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...
EUVD-2025-31845
A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown functionality of the file /show/submissions. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and ma...
EUVD-2025-32805
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...