MAL-2025-185768 Malicious code in bellatrix-local-puppeteer-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a6d6dbfd6ed566627b43a2f32125740bc5874194d00ba5e1b805d7c17f74ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189316 Malicious code in sagitta-mira-ceres-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b76993c5dd8be639afd390d473125aec1b4cb1a0826e660f59f9c189c8e4161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46781

Name of the Vulnerable Software and Affected Versions Survey Maker plugin for WordPress versions up to and including 5.1.9.4 Description The software is susceptible to unauthorized data modification. This is due to a missing capability check within the deactivate plugin option function. This allo...

WordPress plugin quicq 安全漏洞

WordPress quicq plugin is an image optimization tool designed for WordPress that automatically compresses and resizes images to improve website performance. A missing capability check vulnerability exists in WordPress quicq plugin, which can be exploited by attackers to cause unauthorized data...

WordPress plugin Survey Maker 安全漏洞

WordPress Survey Maker plugin is a tool for creating questionnaires with support for multiple question types and data analysis features for businesses or individuals to collect user feedback. WordPress Survey Maker plugin suffers from a missing capability check vulnerability, which stems from a...

WordPress plugin Gallery Plugin for WordPress – Envira Photo Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin...

PT-2025-46793

Name of the Vulnerable Software and Affected Versions Convert WebP & AVIF | Quicq versions prior to 2.0.1 Description The Convert WebP & AVIF | Quicq WordPress plugin is susceptible to unauthorized data modification. This is due to a missing capability check on the wp ajax wpqai disconnect quicq...

HP Integrated Lights-Out Improper Input Validation (CVE-2022-28633)

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file...

HP Integrated Lights-Out Improper Input Validation (CVE-2016-4375)

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

Malicious code in modiov-khan-avcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27af0f513ef5e06d7607e9ef91d743b3e42098830c214bf44a9d432f19ca2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183787 Malicious code in maslv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656941ea059e1a32ea8b0a4298dd11fb63992a79bcb320facc3fcb2b6d39de74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182036 Malicious code in flights-lutuig-alakanjinmahw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfc735b506c0479082621cdbc9f64689a046528646314c69fa350f0e8d5f09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183019 Malicious code in itale-dci-rryusyfsufytftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abdca089e375df5b932abdbff741da21b183e365c98f33dbce04dfd0f1794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181376 Malicious code in baso20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5606ee6e395396c689c9556c4a8e5d0ad54ac4ab647b76ab5bff2f9edbfec32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180807 Malicious code in teate-thy-sonic-orwil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed2c79d94c6f8aee06ebc52b503b631a6fb24ca3ec704b2f2a74dc904c2c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafgafisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b381087d1a94453d701953c38de6cdd49099773bb04442e6225a9389562ca3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176794 Malicious code in nuilva-darde-agalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929c28f424e8056da7b682b956d21444bbcb1bc71c6f75f6e87f50b0d8d14994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173175 Malicious code in buis-manuias-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a0e91a45179b3677bbe483c01642ba531da66a94c5e42f6384c2ebd1f50ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176101 Malicious code in miftah-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b27354b02ba43d5c80f4aa250b8523d0ae3c0de133efeb99b9514c56cd581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...