EUVD-2025-116938

Malicious code in acamar-arcturus-procyon-csv npm...

EUVD-2025-120579

Malicious code in webdriver-mocha-jabbah-csv-radiant npm...

EUVD-2025-115219

Malicious code in comet-proxima-csv-release-it npm...

EUVD-2025-113352

Malicious code in gacrux-csv-capella-pulsar npm...

EUVD-2025-123581

Malicious code in polaris-europa-csv-electron-builder npm...

EUVD-2025-114759

Malicious code in csv-nestjs-mdx-link npm...

EUVD-2025-123412

Malicious code in prettier-stylelint-miranda-rollup-plugin-csv npm...

Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113178

Malicious code in global-fomalhaut-protractor-csv npm...

EUVD-2025-113895

Malicious code in eslint-csv-galaxy-protractor npm...

EUVD-2025-111965

Malicious code in kaus-local-readable-csv npm...

EUVD-2025-113862

Malicious code in eslint-soap-csv-commitizen npm...

EUVD-2025-114769

Malicious code in csv-ariel-sirius-wezen npm...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143181 Malicious code in hapi-csv-zenobia-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4356fae40d4893d8d4c9ab69e759b5bd78aaefd6a7b8e0a47d60c7a2eb1ccdca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142788 Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146135 Malicious code in phenomic-javascript-remark-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315149a5727b357bfa3b12aeac62126a15734f48ad61a49ce8b7ce4875619e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12732: Exposure of Sensitive Information to an Unauthorized Actor

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...

WordPress plugin WP Import – Ultimate CSV XML Importer for WordPress 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin WP...

CVE-2025-12042

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...