CVE-2025-12776 Stored Cross-Site Scripting

The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting XSS attack. Proper management of this functionality helps ensure a secure and seamless user experience. Although the...

CVE-2025-59886

Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the device executing privileged user commands. As cybersecurity standards continue to evolve and to meet our requirements today, Eaton has decided to...

CVE-2025-67712

There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript...

EUVD-2025-204604

There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript...

MAL-2025-122860 Malicious code in retired_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49af34ed217bfbb98064b113a1afe7e4b819b906fa8350026e0433c2e83a4c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89180

Malicious code in retiredparakeetz3n npm...

EUVD-2025-89178

Malicious code in retiredshrimpz3n npm...

EUVD-2025-74292

Malicious code in retiredsquirrelamaranth-28 npm...

MAL-2025-112259 Malicious code in retired_anglerfish_amaranth-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f809104d1a00ff7403d1dd319017190b2097e4bfde99f2825c48964410b00e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_anglerfish_amaranth-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f809104d1a00ff7403d1dd319017190b2097e4bfde99f2825c48964410b00e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75805

Malicious code in retiredswift-smiletea npm...

Malicious code in retired_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4920b2cf5886746e37f57da3964c1c14fb39063b0deb340c39ae6f3017862a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78416

Malicious code in retiredbeetlez3n npm...

EUVD-2025-78415

Malicious code in retiredgopherz3n npm...

EUVD-2025-78414

Malicious code in retiredlynxz3n npm...

MAL-2025-107993 Malicious code in retired_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76552ca8255a9f5f8110a67f9abd0a83d22fa6de8c1ccccc9e43c08a4352af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ab957337a3ee8ec03af140cecb5138a63a10a46b77041d34f03b22373b78bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80709

Malicious code in retiredfrog0xrequest npm...

Malicious code in retired_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b09e4bd378b066e0f1338b272e4b305859a0226227906c25338a0e3683fc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96348 Malicious code in retired_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4220e6c1d5d78719cf306c1e8be5f2b70053cff4adff72678924af5d224f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...