28488 matches found
EUVD-2025-158262
The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to, and including, 3.1.8 via deserialization of untrusted input in the 'restsimpleTranscribeAudio' and 'restsimpleVisionQuery' functions. This makes it possible for authenticated...
CVE-2025-12620
CVE-2025-12620 affects the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (versions up to and including 6.0.7). The root cause is insufficient escaping and inadequate preparation of the SQL query used with the filterbyauthor parameter, enabling an authenticated attacker ...
EUVD-2025-176836
Malicious code in query-betelgeuse-nebula-dotenv-safe npm...
EUVD-2025-176386
Malicious code in sigma-query-interpret-phi-process npm...
EUVD-2025-176038
Malicious code in technocracy-spectron-webdriver-query-winston npm...
EUVD-2025-176171
Malicious code in stub-query-psi-throw-secure npm...
Malicious code in perseus-query-halley-selenology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110c96b540f872d651ac47fdfce3f49caac30f01ee4f9c559fcf0f20d03f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177462
Malicious code in omicron-query-air-cold-kappa npm...
Malicious code in gemini-query-adonis-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88dc675516f0b833eb0fe5dc36d4860582128956738b97d038115774134b5bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177251
Malicious code in perseus-query-halley-selenology npm...
Malicious code in framework-orbit-query-kardashevscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143313a7ae8dac1e177b19d5f45c2056a89330f8ec31efee8e6eaba5a6c1f050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176834
Malicious code in query-relay-tethys-got npm...
EUVD-2025-176674
Malicious code in resolvers-query-comet-radiant npm...
EUVD-2025-176833
Malicious code in query-sed-hash-mu-link npm...
MAL-2025-189656 Malicious code in star-route-query-export-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180139
Malicious code in balance-decompress-authorize-query-thread npm...
EUVD-2025-179311
Malicious code in despina-winston-query-higgs npm...
EUVD-2025-175484
Malicious code in xi-minify-bundle-sigma-query npm...