EUVD-2025-79481

Malicious code in currentcrowz3n npm...

EUVD-2025-82302

Malicious code in currenttermitereplicateautomation npm...

Malicious code in current_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0e412adc58ae45c63e1b1717954e8e2be72ef467032f4e362084e3d5f23f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64666

Malicious code in currentapez3n npm...

EUVD-2025-64663

Malicious code in currentpantherz3n npm...

MAL-2025-84312 Malicious code in current_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ff019357eab64d9e25b63d8161211f7dbac0aaee41b519da1dfc431cf48d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12658

The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...

Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55057

Malicious code in current-plum-deer npm...

EUVD-2025-55055

Malicious code in current-tomato-lemur npm...

EUVD-2025-55059

Malicious code in current-coral-fish npm...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current-teal-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79be0cb04aadbe113f1a77085712d63dd718ec27fcf559a222cec75728de14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55056

Malicious code in current-teal-tahr npm...

EUVD-2025-55054

Malicious code in current-turquoise-catshark npm...

EUVD-2025-55058

Malicious code in current-lime-owl npm...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Adobe InCopy 安全漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution in the current user environment...

PT-2025-46286

Name of the Vulnerable Software and Affected Versions Preload Current Images plugin for WordPress versions prior to 1.4 Description The Preload Current Images plugin for WordPress is susceptible to Stored Cross-Site Scripting through the complete parameter within the 'preload progress bar'...

Adobe Illustrator 安全漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...