ServiceNow Platform Unauthenticated Blind SQL Injection (CVE-2024-8924)

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Xanadu, Washington DC, and earlier Now Platform releases. This vulnerability could potentially enable an unauthenticated user to acquire unauthorized data stored within the Now Platform. Note that Nessus has n...

EUVD-2025-179427

Malicious code in cz-conventional-changelog-ora-rehype-xanadu npm...

EUVD-2025-178669

Malicious code in graviton-module-stratigraphy-xanadu npm...

EUVD-2025-175528

Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...

EUVD-2025-178745

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin npm...

EUVD-2025-177818

Malicious code in miranda-biotechnology-xanadu-halley npm...

EUVD-2025-175674

Malicious code in vuetify-xanadu-stratigraphy-sedimentology npm...

MAL-2025-187881 Malicious code in luna-xanadu-aquarius-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc41d7b808faaf60c42dff26f6f47331e3bd6a23a51389d3ae2a88c7c0f9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176008

Malicious code in terser-rate-limiter-xanadu-palynology npm...

EUVD-2025-175517

Malicious code in xanthus-tectonic-levels-xanadu npm...

EUVD-2025-180268

Malicious code in async-gridsome-xanadu-webdriver-mocha npm...

EUVD-2025-175885

Malicious code in transport-xanadu-delphinus-achernar npm...

EUVD-2025-176090

Malicious code in sync-hugo-xanadu-module npm...

EUVD-2025-175525

Malicious code in xanadu-proxima-transport-hermes npm...

MAL-2025-187213 Malicious code in graviton-module-stratigraphy-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284cd425aae5265639cff05fca5137193ecd4c565a2c96c23cffe44143931462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178366

Malicious code in interstellarmedium-nightwatch-bionics-xanadu npm...

EUVD-2025-177825

Malicious code in mira-flare-xanadu-pavo npm...

EUVD-2025-175527

Malicious code in xanadu-ganymede-thuban-polaris npm...

MAL-2025-187145 Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187137 Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef8b0e335c02e9e3202c8e0195d3bfd55501baef7ef0af424b6b5b8eb2310c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...