Malicious code in selected_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d58eecfa17aa58d62ae57327f9fadec9c0b2d97952f3078c2ab56f03eba79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f558dbaf8d84ece4370c7125bbe396d6f717eb9fc8e89d99827992944df090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84309

Malicious code in selectedsilkwormz3n npm...

Malicious code in selected_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a28da2a32a283cb1c8f651bd015cb05111537469ffd69f5328b0bd0e17f109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73793

Malicious code in selectedopossumz3n npm...

EUVD-2025-73792

Malicious code in selectedquokkaz3n npm...

EUVD-2025-66797

Malicious code in selectedfleaz3n npm...

EUVD-2025-66798

Malicious code in selectedfalconz3n npm...

Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52140

Malicious code in selected-amethyst-pheasant npm...

EUVD-2025-52139

Malicious code in selected-beige-wolverine npm...

EUVD-2025-52137

Malicious code in selected-harlequin-sparrow npm...

EUVD-2025-52136

Malicious code in selected-tomato-seahorse npm...

MAL-2025-70513 Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52138

Malicious code in selected-brown-piranha npm...

EUVD-2025-57370

Malicious code in selectedscallopz3n npm...

EUVD-2025-49419

Malicious code in selectedcricketz3n npm...

Liferay Portal 7.4.3.8 < 7.4.3.112 XSS

Reflected cross-site scripting XSS vulnerability in Language Override in Liferay Portal allows remote attackers to inject arbitrary web script or HTML via the comliferayportallanguageoverridewebinternalportletPLOPortletselectedLanguageId parameter. Note that Nessus has not tested for this issue b...

CVE-2025-62264

Reflected cross-site scripting XSS vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, and 7.4 update 4 through update 92 allows remote attackers to inject arbitrary web script or HTML via the...

GHSA-2J97-4JMQ-C4XF Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter

Reflected cross-site scripting XSS vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, and 7.4 update 4 through update 92 allows remote attackers to inject arbitrary web script or HTML via the...