MAL-2025-154337 Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146213

Malicious code in yuda-7 npm...

Malicious code in cinta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952bbfab0797409b778278f78c3a0f1020f28c06b73ed60490118b0651a04e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f01cd3dec8fb27366664325820c5631866fb7f238b0757bd554427766292d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156255 Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e839b94de9faff19fd1ef09f97091ae151d76ed0b0d1ee5e285d01788d68cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce7d6fbd637e6c7c86ba20a1d11b86a6ed59ef43458503b0a3df1e08033bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74644

Malicious code in fiscalscorpioncyan-7 npm...

EUVD-2025-74467

Malicious code in medicallungfishblush-7 npm...

Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74667

Malicious code in extraordinarywildebeestcrimson-7 npm...

EUVD-2025-74401

Malicious code in oppositeguppysilver-7 npm...

EUVD-2025-74723

Malicious code in drabemugray-7 npm...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77479

Malicious code in valuablesnipeblack-7 npm...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-34397 affecting package glib for versions less than 2.71.0-7

CVE-2024-34397 affecting package glib for versions less than 2.71.0-7. A patched version of the package is available...

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7. A patched version of the package is available...

PT-2025-45550

Name of the Vulnerable Software and Affected Versions Contact Form 7 AWeber Extension versions through 0.1.42 Description The Contact Form 7 AWeber Extension plugin for WordPress has a flaw that allows unauthorized data modification. This is due to a missing capability check on the wp ajax aweber...