EUVD-2025-81558

Malicious code in inevitableharrierreplicateautomation npm...

EUVD-2025-82368

Malicious code in conventionaldamselflyreplicateautomation npm...

EUVD-2025-82098

Malicious code in elderlymolluskreplicateautomation npm...

MAL-2025-111286 Malicious code in yelling_macaw_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f215cb7c08c8925976ec9ec3b928bba09e6d17766edee49d97e6160b1344ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108928 Malicious code in sore_prawn_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902c6fe07a5b270b447d1d13b9390c35bc27e0067cd907a3e7cb2931377fe78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80617

Malicious code in semanticelkreplicateautomation npm...

MAL-2025-100620 Malicious code in clumsy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d9b22e35c3e5a6f4925e8b4334c0c7377e7c5f219c46d16ada88177d83b78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9921c5ca0ad9f46728577c0d62a91b46105fbc80decfe71898d61bf9e4b442f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68343 Malicious code in fiscal-silver-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafebb5b601c22818afa0839aa51ff3d0d9c9d2b19fff756051b3c9c6acaac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a18faea4b4cd403b11cc5ebf86dbf5c98aeedb552d9ac12c93f228ee2695695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2023-2237

The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the postid parameter in versions up to, and including, 4.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Capture, Replicate, Deploy: Image Service Upgrades Now Available

...

The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

The Wiz Research team's investigations into AI-as-a-service providers reveals a major risk to AI systems...

SQL Injection

jeecg-boot is vulnerable to SQL Injection. The vulnerability is due to improper input validation within the /sys/replicate/check component. This could allow an attacker to inject malicious input leading to SQL Injection...

GHSA-FR29-W6J4-525F Jeecg Boot SQL Injection

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

The set of connected documents confirms a SQL injection vulnerability in jeecg-boot, affecting version 3.5.3, exploitable via the /sys/replicate/check component. Root cause cited is improper input handling leading to SQL injection, enabling remote attackers to escalate privileges and access sensi...

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from a SQL injection vulnerability in component /sys/replicate/check...

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a...