EUVD-2025-80737

Malicious code in residentgopherreplicateautomation npm...

MAL-2025-100079 Malicious code in brainy_wallaby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a28cf5fc3c3a1091304cea6d650dcc89db037b99876952de31e4cec6f26f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81921

Malicious code in fatsailfishreplicateautomation npm...

MAL-2025-111286 Malicious code in yelling_macaw_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f215cb7c08c8925976ec9ec3b928bba09e6d17766edee49d97e6160b1344ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100620 Malicious code in clumsy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d9b22e35c3e5a6f4925e8b4334c0c7377e7c5f219c46d16ada88177d83b78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109071 Malicious code in standard_crawdad_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab99207fe6161c74d35c6ea7709d7384cb7bdfa5569d97fbf6802a37c4bd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101127 Malicious code in cruel_pinniped_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c618b346d61b321e3a9130813b991a1511c4df123d6e084259d441ae0e41e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9921c5ca0ad9f46728577c0d62a91b46105fbc80decfe71898d61bf9e4b442f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68343 Malicious code in fiscal-silver-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafebb5b601c22818afa0839aa51ff3d0d9c9d2b19fff756051b3c9c6acaac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a18faea4b4cd403b11cc5ebf86dbf5c98aeedb552d9ac12c93f228ee2695695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2023-2237

The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the postid parameter in versions up to, and including, 4.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Capture, Replicate, Deploy: Image Service Upgrades Now Available

...

The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

The Wiz Research team's investigations into AI-as-a-service providers reveals a major risk to AI systems...

SQL Injection

jeecg-boot is vulnerable to SQL Injection. The vulnerability is due to improper input validation within the /sys/replicate/check component. This could allow an attacker to inject malicious input leading to SQL Injection...

GHSA-FR29-W6J4-525F Jeecg Boot SQL Injection

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-41543

The set of connected documents confirms a SQL injection vulnerability in jeecg-boot, affecting version 3.5.3, exploitable via the /sys/replicate/check component. Root cause cited is improper input handling leading to SQL injection, enabling remote attackers to escalate privileges and access sensi...

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from a SQL injection vulnerability in component /sys/replicate/check...

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a...