Malicious code in tunis-kit-gahuadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592c11f2958f10cfc3205c12709579c98be9f0a7c9dd01e866a513bf0afd907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-garvimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4141331f7de023b02c68cd4dbe105c7379e5ffefac756d5d95cd1786f4740050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad4610217d9a297aee3cf041c4ed4f6ace73c9c08b175df9ab0866a4e5b3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavowi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007cb22d1aa3da6579b4f3b05a3b35f842ec54564e0efbc8fee0998e1b68fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185266 Malicious code in tunis-kit-gahuadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592c11f2958f10cfc3205c12709579c98be9f0a7c9dd01e866a513bf0afd907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185265 Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185260 Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185275 Malicious code in tunis-kit-gahufaudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96c25521fffc2dd128535d8cce2bf0335b553a049798c82f5d93b564105f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185261 Malicious code in tunis-kit-bogavoaawi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99e8d931079d4450f0851d04c9e1d1a1305994dd874be6d31015c0014c6e5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185259 Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185267 Malicious code in tunis-kit-gahudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628190190e0c638c8ce5c74f644650cd855332ab3915cf4788a75c3a1adb30c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

CVE-2024-26469

Server-Side Request Forgery SSRF vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service DoS and escalate privileges via the url parameter in the postProcess method...

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

CVE-2024-26469

Server-Side Request Forgery SSRF vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service DoS and escalate privileges via the url parameter in the postProcess method...

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

Design/Logic Flaw

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

Path traversal

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...