safetext

safetext 이 제품은 공식적으로 지원되는 Google 제품이 아닙니다. YAML과 같은 형식을 생성하기 위한 safe-by-construction 라이브러리입니다. text/template이나 sprintf처럼 생성하는 형식의 구문을 인식하지 못해 주입 취약점에 노출된 라이브러리를 대체합니다. 예제 사용 사례 text/template은 자신이 생성하는 형식의 구문을 인식하지 못하므로 주입 취약점에 대한 보호 기능을 제공하지 않습니다. YAML을 생성하기 위해 text/template을 사용하는 다음 produceConfi...

EUVD-2025-117017

Malicious code in unaware-black-possum npm...

EUVD-2025-88218

Malicious code in unawaretarantulaz3n npm...

EUVD-2025-88220

Malicious code in unawareplanarianz3n npm...

EUVD-2025-88219

Malicious code in unawaresnakez3n npm...

MAL-2025-117665 Malicious code in unaware_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e5e5a15aa5826fa04532f9e34d4f777cfa594674f57f5a31419a92633468b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75371

Malicious code in unawaremarsupial-smiletea npm...

EUVD-2025-80223

Malicious code in unawarehummingbird0xrequest npm...

Malicious code in unaware_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14db49c1fd51093d2cb145585f3c070cfdb7376a0db2040b2eee1a624136717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73199

Malicious code in unawareloonz3n npm...

Malicious code in unaware-gold-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b2ec55d6993e9f0f104898e92c211dae3f7d54c959466a815b88da2b48841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51420

Malicious code in unaware-cyan-mollusk npm...

EUVD-2025-51416

Malicious code in unaware-silver-squid npm...

EUVD-2025-51417

Malicious code in unaware-purple-impala npm...

EUVD-2025-51419

Malicious code in unaware-gold-anglerfish npm...

EUVD-2025-51418

Malicious code in unaware-peach-deer npm...

EUVD-2025-51421

Malicious code in unaware-chocolate-bat npm...

MAL-2025-61516 Malicious code in unaware_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbccdddda3bfef2bda8c70c71425ef8bb28ca7bd3635a2ac6a25e3b539b967e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3d05dfb59407deb96f9c98d454651d3ffe25c5407d1f690059fc5333dda329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...