MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124609

Malicious code in nconf-dorado-blaze-cz-conventional-changelog npm...

MAL-2025-140205 Malicious code in bulma-blaze-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187e3df5f25fa89e7d582ad2b49cb8dd54a88d1dc8b42e7694934d80e7d5b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140018 Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140033 Malicious code in blaze-terser-webpack-plugin-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0152746bc7187f5b2e16c25a8ebde8b0e0bf3b60bb7c0ba31181138c8c2bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140017 Malicious code in blaze-antd-halley-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ada04165f0bab6357a0605b4d95fc185956c1bc0b8618cb7d3f6aa78bd3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140035 Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147457 Malicious code in rimraf-pegasus-blaze-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65013a25305c06788d4bd511b1ba06e797528dce411fd77dba655986b5ca4b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149203 Malicious code in vuetify-blaze-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd317c6a436af395b26d7399e04af36ed8f51614a95c8d7125b905ab6a7f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140986 Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146868 Malicious code in puppeteer-writable-blaze-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703192cac3036ff13d5bdc44a4e5625b481f7c3268d6bfd58fb3ed2c6bbaeb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-electron-ganymede-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99503b4040bfe0e830f3ed01ce73d0f71ebdd7bde27331e44d0645e89970aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-0580

Malware in sbrugna...

EUVD-2025-29548

Malicious code in bioql PyPI...

EUVD-2024-52366

Malicious code in bioql PyPI...

CVE-2025-8446

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...

WordPress Blaze Demo Importer plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Install vulnerability discovered by wesley wcraft in WordPress Plugin Blaze Demo Importer versions = 1.0.12...

CVE-2025-8446

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...

CVE-2025-8446 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...