Cybersecurity Firm TAC Security Hits 10,000 Clients, Enters Top 5 in Global VM & AppSec

New York, New York, April 1st, 2026, CyberNewswire...

CVE-2025-13127 XSS in TACAS Consulting's GoldenHorn

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

CVE-2025-13127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

EUVD-2025-146368

Malicious code in verify-tac-malasiu npm...

Malicious code in verify-tac-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8f39947691bad86072e13dd4e0eeca844fc3b261f51b6cb5f7901f89a063fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146376

Malicious code in verify-tac-malai npm...

Malicious code in dajouka-reta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8241b5d9e5aa96f02af1ae354f15e04c2c311976c9f48236de8c7477d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dsas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebed85650ecdfc7071514f1f6c41f7e87866f8df28f2008ddf32ba51cb1e358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dpdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69bfd7069502a0c27dd86497127b8599699e72354b9757f260219b8a0fd10e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e8d5a87ba7adafdd15a2f5abf2c38e8d385bef18decf14c2a3fcda7fef759e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146377

Malicious code in verify-tac-mal npm...

EUVD-2025-146375

Malicious code in verify-tac-malasi npm...

EUVD-2025-146373

Malicious code in verify-tac-malasikibaulu npm...

EUVD-2025-146372

Malicious code in verify-tac-malasikiblu npm...

EUVD-2025-146370

Malicious code in verify-tac-malasikiu npm...

EUVD-2025-146367

Malicious code in verify-tac-mechanical npm...

EUVD-2025-146366

Malicious code in verify-tac-mehanical npm...

EUVD-2025-146365

Malicious code in verify-tac-mehnal npm...

EUVD-2025-146363

Malicious code in verify-tac-mhal npm...

EUVD-2025-146374

Malicious code in verify-tac-malasikibakulu npm...