EUVD-2025-198151

A security flaw has been discovered in codehub666 94list up to 5831c8240e99a72b7d3508c79ef46ae4b96befe8. The impacted element is the function Login of the file /function.php. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the publi...

PT-2025-47451

Name of the Vulnerable Software and Affected Versions codehub666 94list affected versions not specified Description A security flaw exists in codehub666 94list. The issue involves a SQL injection impacting the Login function within the /function.php file. This allows for remote exploitation. The...

It's a Feature, Not a Bug: Secure and Auditable State Rollback for Confidential Cloud Applications

Replay and rollback attacks threaten cloud application integrity by reintroducing authentic yet stale data through an untrusted storage interface to compromise application decision-making. Prior security frameworks mitigate these attacks by enforcing forward-only state transitions state continuit...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabi-cufanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e1a948699bdc7ba2ee6a6b0605edfb655b5433ca946aed709366c50cd5668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f4f91ae962580afdceac49bf763c22c1362b22161dc3e7078e7f06f5a0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174783 Malicious code in hokage-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04774bce885ded3a693840ff0391f502651170a1a7388a7559f17e500831ae9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nurur-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70962d3af909ab6f63b73e677869a01960f325ba0504944903f220d8bd5e84ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assad-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c611cd04169cc3549558e62966a166620d2f9dd38960a77cae1336969cdb680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ecm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb311c62b29bfd7d209a0c04282cb48f72d0931fb5ea02c22bf322ec1cbc3876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151025 Malicious code in @miptaa02/welad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fb54076bdea7cc3e46e2be895cdf902ebbc6aea6349846bd2c6e8c464fb59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163251 Malicious code in nokire-nana92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3e261314f9934973c70ab67c8f8be8efcdfe9f3dcd2f36a503ace452f6d51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167872 Malicious code in teagood-yakuna16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66d283ea9a0ea7b5e33e4d8205e3908789ae9160a6dabf13b7880a48f059db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-buniasn-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baef55f1ce9791c8d105183b2aee47652f96cb04eb99ca47c7199bd4f66fb13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec22b0cb1d8f566bc4856b65db063c267fa92f2c7c8ec670e96724fb55ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189a6edca0fd1741f908a7dcb2913db131cc30ecba2bb635d1a29d7995948469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158163 Malicious code in lintang-korea1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8acbb36ce7ac3fa20d31edd6c3ee48daabd87abd979f0e43061e4712fe465c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/isin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e084a14267d9e6d694b084cb0ec97c4a0a7fae5619c86e5558e0d4d8916f8be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gqasas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c42d4402d7e793f924ec483818c7cd984dafdf2007fcfb152cc120fd567c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4201ec71004a27b30cad38e0a7c07c9c125e1fedc97cd96ff7eefba9e22e000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...