MAL-2025-80022 Malicious code in mixed_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99affc848892cb507938ab103305620f96a7320ab853518c06cafff613338c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52970

Malicious code in obnoxious-blush-sloth npm...

EUVD-2025-52021

Malicious code in similar-amethyst-sloth npm...

Malicious code in just-gray-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7873cdf2493f3e62b43adef4234795dcaed3b9b8d92ce960566ef96efd436dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51625

Malicious code in sympathetic-ivory-sloth npm...

EUVD-2025-51733

Malicious code in substantial-maroon-sloth npm...

EUVD-2025-55491

Malicious code in cheerful-aquamarine-sloth npm...

EUVD-2025-52521

Malicious code in quarrelsome-chocolate-sloth npm...

Malicious code in substantial-maroon-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6a90ade9d396331ccc3727320e77cd0b9577bbd3d9296234ebad391ffd8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53620

Malicious code in just-gray-sloth npm...

EUVD-2025-52519

Malicious code in quarrelsome-yellow-sloth npm...

MAL-2025-61173 Malicious code in reluctant_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14cafad95b59ef7e2db699de8ad2cd172408a330c621740d8d1fa046c83255b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49100

Malicious code in variousslothz3n npm...

EUVD-2025-48871

Malicious code in adorableslothz3n npm...

EUVD-2025-23374

Malicious code in bioql PyPI...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

CVE-2025-45778

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...

PT-2025-31655

Name of the Vulnerable Software and Affected Versions The Language Sloth Web Application version 1.0 Description A stored cross-site scripting XSS vulnerability exists in The Language Sloth Web Application. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted...

CVE-2025-45778: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...