MAL-2025-59955 Malicious code in alright_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b7a9d68fd1e473a66a00dd2e47c1b90e6e8b1abf2ade3b177103b3c232be1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Alright versions = 1.6.1...

Malware in alb-um-availa-ble-zip-mp3-file-30506-i-feel-alright-898re-atdkuh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...