MAL-2025-100569 Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107771 Malicious code in realistic_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0dbbda7425dd7eb166bafd1764df26f4f5a2b6ef00cf4c42009b597d1a5422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100714 Malicious code in commercial_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20640655d822fc515207f27cbe51a382bf71cea857fae7c9df3245d453ff92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kepok78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a8b89e88a9f852a2c0a207b7019fcdfb5bf61c6f143cf944f5b8d9ec98dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kembang74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cba63760f2532f134cf9c2241eee71f185b26f6476b98e0e4f095faef824e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-keripik56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b96ab87e4d68128060fa8c232964715f451f9e71b9c3c201e76132b08249b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91892 Malicious code in vina-klanting80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82886d8eb749ee026213b076543cf671fdd0e50cd99c275c8bddf857f9636c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78009 Malicious code in excited_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d276b7c764b548a171cbc807a116da30a0b0f9f314905456bd3fb23840337ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73233 Malicious code in hadi-ketoprak30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fd54258b7972394a5a5544457b11efb4297c85417f0c6a9ec93f74ffd04d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-mieayam98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f353890f214df7d19d5dbfc952b868bc5b29992d795b10d72451a737cff6c633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d2cdb2435c42c88b62f95d2969247949482183d57914e25b286474c98f80dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-bubur79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbbd578681de8c6218d7a186a07bca6469672186481959971b301180ccf48bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54466 Malicious code in qori-dodol68-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cb8682ae0dcf80266f2ab8cea8a58ce01bb488eeb8926f06ebf89d6d43b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-ketoprak3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276a75e372f041b923cce910d4f5e573be6cccfa70329beaf033ab9c43cfaea0 The package eko-ketoprak3-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223 Bdtask Flight Booking Software Package Information package-information unrestricted upload

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223 Bdtask Flight Booking Software Package Information package-information unrestricted upload

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

EUVD-2025-36076

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...