Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

Verified against: getgrav/grav devel branch, GRAVVERSION = "2.0.15", file index.php Title Unauthenticated Path Traversal via Missing Directory-Boundary Check in plugin-asset-map.php Static Asset Server index.php Product / Affected Versions - Product: getgrav/grav - File: index.php top-level front...

Malicious code in lisa-gulai65-sukiwir (npm)

Source: amazon-inspector 41f8e7fd29a5d1a1eae2b3bd752239ddb96c15de0253c6ed6b60f34955a488ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jengkol46-miaww (npm)

Source: amazon-inspector 773168d08b92f21137b9477a2793f9042d0b2e09643d3eb8a3b1d08443540e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-ikan40-breki (npm)

Source: amazon-inspector 11ced4cf0e32bc1d604a918c4448ab7399cdef83200fb080ae18414480b27b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jamblang16-remi (npm)

Source: amazon-inspector c95c9abf2ab2cac4193569f7b3165ead6d9edf9b807010ce88f8d771667cb803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jamblang72-breki (npm)

Source: amazon-inspector b35e687bd1529d09a7fec1c932059f99ff4c4c2111384ec4c4822f4d317da203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gulai32-sluey (npm)

Source: amazon-inspector e79cd6424d4153e685c786b829e5bc27887b53dabbdda0318e9e1d16fbaed8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jamblang15-sukiwir (npm)

Source: amazon-inspector def2c3157af4b848bc9bd17cc9accc2fe70f3793169f7e41e45b3b7d3050cbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gulai37-sukiwir (npm)

Source: amazon-inspector 7388bbccd72389289c71b374ec73ba05b15a1aad97fa1701a7815b7c243ae2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jamblang9-sluey (npm)

Source: amazon-inspector 5132c8529fc61c6be807a909372f8786685efa34d0dafb1e7b89c407de0f98f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gudeg59-breki (npm)

Source: amazon-inspector 3a9802d401ea885a1d60d2f608b6a53c6a0674edb4009f435853649f7b3b5bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jus17-ruro (npm)

Source: amazon-inspector fa99fba90a729b48d1c12250a50a324f2ec8cd4fd3cf8f20526be13866d5c63d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gulai61-sukiwir (npm)

Source: amazon-inspector c76db0bb57a6d9616bd4055ae266c207b1c9818a60810696db61fb3337ee0bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jamblang60-sluey (npm)

Source: amazon-inspector 8b8d7151d3b907499e68b37a5186e635199e1cfc2a1a8361ba4025288771076b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gulai30-breki (npm)

Source: amazon-inspector 8ab69cad6c5d428aeaed7ab7cef91c2090a3d4dd5c97f5ae40825a84786a5a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gudeg30-sumpek (npm)

Source: amazon-inspector ee5346648260274ef648f731d7bf4c142457b39890dc906645814d213a2b98ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-ikan25-riris (npm)

Source: amazon-inspector b66efa9cb197cee50e48abc09c70fa67faf20833d01b66f62b785778937698bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-jengkol34-miaww (npm)

Source: amazon-inspector e956b50737b06e6cbf7357744498b20ad33e753a433cbc6772d930c418ddfd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gudeg42-riris (npm)

Source: amazon-inspector 9793a59c80950f9a765e8e62aee76b89f4fd1d10b7071d76464afd992e6b5958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gembus100-pore (npm)

Source: amazon-inspector d3d0dd35d3d0119067f298240ebb50bd5a28ea054adcf7a6ca99ef1a5810cff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gudeg13-sluey (npm)

Source: amazon-inspector d68da13f5ea13e96b68ae47ef1b243686145d7545d8f25ab9b6638985868c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gembus72-riris (npm)

Source: amazon-inspector 443810477b8e33dd17af0fa98d78ad11fbdb0ad2bda51c43c3afdb91ace955be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gado-gado96-miaww (npm)

Source: amazon-inspector 67149864300e4491d1fe829a7b10a840b3c39bc353558ed50bd3a635786ec69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getuk77-sluey (npm)

Source: amazon-inspector 01edb704b1109e811ba65ed03b528cddaf77b5773979ae608afb428c42960a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gaplek22-sukiwir (npm)

Source: amazon-inspector d285314c8ec8dfa07491fabd71e77a5e0c6f5620b7abf84a1ff26ec3a0a272e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gorengan62-sluey (npm)

Source: amazon-inspector fb5d43f71e6e08e38e2834d2993af178e149580cd74dab07ec2454738d82136d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas37-miaww (npm)

Source: amazon-inspector a43f58e407a7ebba7cc0a6d552005e497a2693c60de887bd1934bc0da9caf14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getuk7-riris (npm)

Source: amazon-inspector 30d5a9efe58fdb19bdf9140c1ea4e7898ca322b2a794e809d3bc988af8690dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gembus35-sumpek (npm)

Source: amazon-inspector b32dd62d2eea8f6936430a078edfd526f75c177bd371485fb59380071fb11b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gado-gado86-apidev (npm)

Source: amazon-inspector 1c0bda818a1cca929b38f8a5be2c5e9645d1ee2d1eae9be4d1a4b80129fc5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas76-ruro (npm)

Source: amazon-inspector 8a0b727389aba437d910ab7938a8998a2f8baa9832a0dceed92ef613ec78d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas76-miaww (npm)

Source: amazon-inspector a4d1367e3928356ee8b11a0d8a753d78e5c57a5a5b0e23152472a133e46dbc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gaplek22-ruro (npm)

Source: amazon-inspector 7e55637e6e7b5b39c38cde1183b1bca3e72e25a6c4b214cbf60e817934f44bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gaplek51-riris (npm)

Source: amazon-inspector ea1634cf4af8dcf3741fac21d1f40d02ea8dc5748ed72253bc74c8b6894e6c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gado-gado20-sukiwir (npm)

Source: amazon-inspector be4eefb8f5cec219c32e1ad6709d657e4bbc9afcfa785185ae4bb29b8f907731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gado-gado8-ruro (npm)

Source: amazon-inspector a82d02af0b12e6f5daa05f4db0aa77910724f5c1c377c27a1d7d7eb3e002552e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas23-apidev (npm)

Source: amazon-inspector b1af4e3e4020269364f75231dbfbc991e28033887012b881ff4df2c9ab20a771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-esdoger16-miaww (npm)

Source: amazon-inspector c2c04279f06435e0a3c08d2b59ffcc26059dc40bcdbfb5db1207e3ba882666f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gado-gado88-ruro (npm)

Source: amazon-inspector b28b8633b6dc77455765102913f72b43c23aa8968def945009bf78a59731a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas63-sukiwir (npm)

Source: amazon-inspector 3182cd74c194bc2f486eaedfee1c9fb08486873e3339c4ee05ae588006d29df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getuk11-miaww (npm)

Source: amazon-inspector 3aacb87489cfa3af8a6b7413bbec58cbf48d43e484c7cb7f59b5818d7ad74640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gandul37-breki (npm)

Source: amazon-inspector 4b4b2612725cb63cb1c1b5d7171afe502b9d54e0d17e9c5c9e7bbd6882293ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-getas81-sukiwir (npm)

Source: amazon-inspector a0807f7aed4be31c18df48e151b7f86a683de3d872cd34f406287d839a815d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-enting89-sluey (npm)

Source: amazon-inspector 63376b64c299a7d8cc4148cd055b723265575bc8d7ba29e86b6a9624801f0f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-esdoger11-ruro (npm)

Source: amazon-inspector 17fe3e222f19afc6fa0d58951afbd6dfdeba82b7522495961936c5350ba1dac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gorengan43-miaww (npm)

Source: amazon-inspector ec4c750e8253dbc17a91dc7534d6fe696afb6a83380005daee26c9fa11c19281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gepuk30-breki (npm)

Source: amazon-inspector c83a11f8dbc4e3aae610dfe29d822e90e76101a85dc774493b6e7f9329fb3602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gandul17-riris (npm)

Source: amazon-inspector ab52ef42d2ea0f089b054f4e3eec2ffca094663af10a2da8341343f9cc5265d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lisa-gorengan76-kyuki (npm)

The package lisa-gorengan76-kyuki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lisa-gaplek6-sluey (npm)

Source: amazon-inspector 7f41c0d0b737f20e534bd556aa6a8b8a567872c20f2b4901f25b0ee63a6c27d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...