WordPress Peer Publish plugin Cross-Site Request Forgery Vulnerability

The WordPress Peer Publish plugin is a tool for multi-author collaboration that allows users to submit posts to a WordPress blog for review and publication by other users. A cross-site request forgery vulnerability exists in WordPress Peer Publish plugin, which stems from a lack of random number...

OPENSUSE-SU-2025:20049-1 Security update for tiff

This update for tiff fixes the following issues: tiff was updated to 4.7.1: Software configuration changes: Define HAVEJPEGTURBODUALMODE812 and LERCSTATIC in tifconfig.h. CMake: define WORDSBIGENDIAN via tifconfig.h doc/CMakeLists.txt: remove useless cmakeminimumrequired CMake: fix build with...

Malicious code in jasmine-karma-innercore-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203c72244b8153dbfc6ea87c52825b1a48e6cc1db0147ae09eecb408d18f79d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1702a5ded5d7db3c4166a15a439a1ab13253c487e4124cb1374ba85b937cfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189535 Malicious code in slidev-levels-install-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab6a6244fda69cb617aec284412593aaf95900f028ed41c9805a71c843f185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e644b2ee581f6c33253618a58c48ad72b08f735d6e9a12ea9a6e9470b2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588b8ea150596654287d95a662d2688ccd44cb43d3c2f6fd5cc00ab13bb35d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2faf43bda81f60c68998e04af4450c5171b99bfad862c3619f33cfe8e9ad009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b131a1f1bc9526a0972a1159f9f4c097c2d3f8b3a0876d446e89210e66f501a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185034 Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184580 Malicious code in odasv-kinu-bobacuon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95de16ce4aa95ba461c2d8ffbcad7e307b443730c4a424c44bfb182a696bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182382 Malicious code in imodiov-kufi-coi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c83fee882ad91a35d4635b4ed411eded19fe7b8793c405dd5bff4fa6c92a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hupez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeed786471a736c3f207e95db064deec626882e45d10fd1dfe2db1579e1bf4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179664 Malicious code in kisut-dfg-dufadiuyban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0d27ad4b45b1e0b957176f23dc2e26f47c4d5387b3d3dd7ca01e750e7cdc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179673 Malicious code in kisut-fafunig-amfacaicufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56247d8a742b77f3ebde1b5a812fb37f04af07390885e5d131dcb0017a59dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoalamaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbbc7a2ce2c757f793b142a78b87a35a0b8a4b70eaf58fad3f3c66c3f61492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafdagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f15fd7608ceff622af3157760d1e0f758554fd640a37d847b2e6dd1d1d69aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc4c48caf099951306f163926f2e18a1fc0c85f42e7330e65802a78584ebc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaahga-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20f17559dc1583c2cefac64d44b444a96b756d4b55a34974dabb174c3543f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...