Malicious code in cloud-class-stack-xml-runtime (npm)

Source: amazon-inspector 233273838b0bc9fcd5abb46cd15a57798f84aacac1be400324b3c6b7173ae244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-179710

Malicious code in cloud-class-stack-xml-runtime npm...

CVE-2024-4201

GitLab CVE-2024-4201 describes a cross-site scripting flaw when viewing XML in raw mode, affecting all versions from 5.1 up to 16.10.7, 16.11 up to 16.111.4, and 17.0 up to 17.0.2. Root cause: inadequate sanitization/rendering of raw XHTML that can render as HTML under specific circumstances. Imp...