Malicious code in eko-papeda4-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d92cdfd5ac8449969cf39583c07d93da2b82d258e8e5d2d791b2d79297c2276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88398 Malicious code in maya-tahu30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa18c22668dcae8996f93db945bcdca742411d91baac12624b90af76c608c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83473 Malicious code in bambang-taiwan88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5ca100d492ea03718edf312b320b9d930f8abcc58af3b80ef9cab516d66776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78184 Malicious code in fauzi-saguer53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7777ead17793ac51c9af1c6b601dc4021a39c77bc7e27ed8714c5bd058bd5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76290 Malicious code in xaver-esdoger61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015670bdccc769d2f9fb9ac05eefe4f8e61c43df8d29cb9d4740e74a7957c847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71875 Malicious code in agus-kemplang31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63a074a4715e364dc0d29db905e2640eddaa38ae85d6f15c304029a001b6bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gado-gado43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f8a36dc6c06890f8178075f745d8bc09d1e81310d96a6972566c2b426d9249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-peach-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46de2d7f398790fee054a14fce2d1d9f32aa3c59c516ca78c4fc3d29ec78ab28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-indigo-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012547fc3e6b24f15f23ab2fc928e249af92ca55473808ad5498e29ad7e3a7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759d48074d9849475b37d00cfa065f51a497bcc9fef9e5a7eb2820d9fefea85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-toge98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c9963d6422b22592d7be74d7e6c455dd4a531442ef3d99152db8d000caa0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57167 Malicious code in kiki-tahutek43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457727a7767cf7769494201289665a59e5cbc8fa02aade8e532014c50fc47966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-nasisayur25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e524ee09a7003be7c56b8f0b027f84eab1959ae1a77da2f7958c1da9470737f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-45541

Name of the Vulnerable Software and Affected Versions Simple Downloads List plugin for WordPress versions up to and including 1.4.3 Description The Simple Downloads List plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check on the wp ajax...

CVE-2025-54863

Radiometrics VizAir is affected by a vulnerability where the system’s REST API key is exposed via a publicly accessible configuration file. Public access could let an attacker remotely alter weather data and configurations, automate attacks across multiple instances, and exfiltrate sensitive mete...

PT-2025-45015

Name of the Vulnerable Software and Affected Versions Radiometrics VizAir affected versions not specified Description Radiometrics VizAir is susceptible to exposure of its REST API key through a publicly accessible configuration file. Successful exploitation allows attackers to remotely alter...

PT-2025-43605

Name of the Vulnerable Software and Affected Versions ZoloBlocks – Gutenberg Block Editor Plugin versions prior to 2.3.12 Description The ZoloBlocks – Gutenberg Block Editor Plugin for WordPress has a flaw that allows unauthorized modification of data. Specifically, a missing capability check...

Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in Oracle MySQL Specifically for versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. The vulnerabilities in Oracle MySQL allow highly privileged attackers to perform denial-of-service attacks and manipulate data without authorization. This can lead to severe...

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

...

CVE-2025-53056

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Object and Environment Tech. Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...