Malicious code in just-gray-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7873cdf2493f3e62b43adef4234795dcaed3b9b8d92ce960566ef96efd436dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52021

Malicious code in similar-amethyst-sloth npm...

EUVD-2025-51733

Malicious code in substantial-maroon-sloth npm...

EUVD-2025-51625

Malicious code in sympathetic-ivory-sloth npm...

EUVD-2025-52521

Malicious code in quarrelsome-chocolate-sloth npm...

EUVD-2025-52519

Malicious code in quarrelsome-yellow-sloth npm...

EUVD-2025-53620

Malicious code in just-gray-sloth npm...

EUVD-2025-55491

Malicious code in cheerful-aquamarine-sloth npm...

Malicious code in substantial-maroon-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6a90ade9d396331ccc3727320e77cd0b9577bbd3d9296234ebad391ffd8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61173 Malicious code in reluctant_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14cafad95b59ef7e2db699de8ad2cd172408a330c621740d8d1fa046c83255b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49100

Malicious code in variousslothz3n npm...

EUVD-2025-48871

Malicious code in adorableslothz3n npm...

EUVD-2025-23374

Malicious code in bioql PyPI...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

PT-2025-31655

Name of the Vulnerable Software and Affected Versions The Language Sloth Web Application version 1.0 Description A stored cross-site scripting XSS vulnerability exists in The Language Sloth Web Application. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted...

Language Sloth Web Application 安全漏洞

Language Sloth Web Application is a web page application from Language Sloth, Inc. A security vulnerability exists in Language Sloth Web Application version 1.0, which originates from stored cross-site scripting and allows an attacker to execute arbitrary web script or HTML by injecting a special...

CVE-2025-45778

The Language Sloth Web Application v1.0 is affected by a stored XSS in the Description field, allowing an attacker to inject payloads and execute arbitrary scripts when pages are loaded. The issue is identified as CVE-2025-45778 with CVSS v3.1 base score 6.1 (Network, Low attack complexity, No pr...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...