safetext

safetext 这不是 Google 官方支持的产品。 这些库采用 safe-by-construction（安全构造）方法生成 YAML 等格式，用来替代像 text/template 和 sprintf 这样不感知语法、易受注入漏洞影响的库。 示例用例 由于 text/template 不感知它生成格式的语法，因此它无法提供任何针对注入漏洞的防护。 请考虑下面这个使用 text/template 生成 YAML 的 produceConfig 函数： package main import "bytes" "fmt" "text/template" func...

EUVD-2025-117017

Malicious code in unaware-black-possum npm...

EUVD-2025-88218

Malicious code in unawaretarantulaz3n npm...

EUVD-2025-88219

Malicious code in unawaresnakez3n npm...

EUVD-2025-88220

Malicious code in unawareplanarianz3n npm...

MAL-2025-117665 Malicious code in unaware_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e5e5a15aa5826fa04532f9e34d4f777cfa594674f57f5a31419a92633468b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75371

Malicious code in unawaremarsupial-smiletea npm...

EUVD-2025-80223

Malicious code in unawarehummingbird0xrequest npm...

Malicious code in unaware_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14db49c1fd51093d2cb145585f3c070cfdb7376a0db2040b2eee1a624136717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73199

Malicious code in unawareloonz3n npm...

Malicious code in unaware-gold-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b2ec55d6993e9f0f104898e92c211dae3f7d54c959466a815b88da2b48841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51416

Malicious code in unaware-silver-squid npm...

EUVD-2025-51420

Malicious code in unaware-cyan-mollusk npm...

EUVD-2025-51418

Malicious code in unaware-peach-deer npm...

EUVD-2025-51421

Malicious code in unaware-chocolate-bat npm...

EUVD-2025-51417

Malicious code in unaware-purple-impala npm...

EUVD-2025-51419

Malicious code in unaware-gold-anglerfish npm...

MAL-2025-61516 Malicious code in unaware_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbccdddda3bfef2bda8c70c71425ef8bb28ca7bd3635a2ac6a25e3b539b967e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3d05dfb59407deb96f9c98d454651d3ffe25c5407d1f690059fc5333dda329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...