Cybersecurity Firm TAC Security Hits 10,000 Clients, Enters Top 5 in Global VM & AppSec

New York, New York, April 1st, 2026, CyberNewswire...

CVE-2025-13127 XSS in TACAS Consulting's GoldenHorn

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

CVE-2025-13127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

EUVD-2025-146363

Malicious code in verify-tac-mhal npm...

EUVD-2025-146373

Malicious code in verify-tac-malasikibaulu npm...

EUVD-2025-146376

Malicious code in verify-tac-malai npm...

Malicious code in verify-tac-malai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356b88f4b47b339f109743a89ee1f0ceb4be4f2f97e5b00f610a4c069dfff991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146365

Malicious code in verify-tac-mehnal npm...

EUVD-2025-146370

Malicious code in verify-tac-malasikiu npm...

EUVD-2025-146372

Malicious code in verify-tac-malasikiblu npm...

Malicious code in verify-tac-malasikiblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1848278c34558fa344142dbfcdae0b480d5eaf718b48ba095c58444fa0e85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146367

Malicious code in verify-tac-mechanical npm...

Malicious code in dajouka-dpas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1ed0730243555b1db305f68bf602cd630c0948bd6b4d230b87b9732951e9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-reta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8241b5d9e5aa96f02af1ae354f15e04c2c311976c9f48236de8c7477d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154143 Malicious code in dajouka-d-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ecdb31630c06e921a1c2a0b14f151865c03c3c958165255441eeb7db42e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170447 Malicious code in verify-tac-mehnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dfe6085d2dc622f40fd183b692cc8ae687903d0e2d59fbcaaf0b78a2243aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146369

Malicious code in verify-tac-malasiku npm...

EUVD-2025-146362

Malicious code in verify-tac-mhnal npm...

EUVD-2025-146366

Malicious code in verify-tac-mehanical npm...

Malicious code in verify-tac-mhnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2a5c697bdcbca1d5a2cda9fe4bfba26612659dfbcd1fadce9d3abe655c005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...