MAL-2025-149414 Malicious code in webpack-yakutsk-tailwindcss-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25825cc6a045d46e8a6a37b1471e8c3cecd611ebb0c739ebb6da4d03503de226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11996

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the fuideleteimage and fuideleteallimages functiosn in all versions up to, and including, 1.0.7. This makes it possible for unauthenticated attackers to delete all of a site...

CVE-2025-42894

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

Responsive Hotel Site roomdel.php File SQL Injection Vulnerability

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that stems from the /admin/roomdel.php file mishandling the ID parameter and failing to properly validate and filter user input. An attacker can exploit this vulnerability to obta...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2025-2326)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject...

The vulnerability of the Security component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform lies in its lack of access control mechanisms. This allows attackers to gain read, modify, and delete access to data.

The vulnerability of the Security component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to access control deficiencies. Exploiting this vulnerability may allow an attacker operating remotely to gain read, modify, and delete...

Malicious code in surya-rendang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1f544f92b819743395e0336b8cc22f6750d1f2ca7fe6b652b9159ba270a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-buburayam62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7723bb5a72fd7e0a81dc591e75c3d60a5edb35e163ec716aeac3bce55b25d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137254 Malicious code in tender_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a0d8b8be4acd830e9984937b3321f2d96184d16cf5ab79e58abda141b2c0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134692 Malicious code in joko-tahutek75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6f02bd027b639303e8943316f6a4354f6d85e879b6db8a74c8e451268ae2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136348 Malicious code in putra-tapai80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544615cfe38106ae25b8c2f9e72a16aad05bf257dcb67e2f0505c03e73d30ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135835 Malicious code in nina-tahu5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556a30aa609daacbc39cc1095e119f2b10c855795fc70db7bf86244f68aaad82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137086 Malicious code in sticky_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db375daddf7527cf109416b84b0726510d039d23e1257e9a9987a5091cc667ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-nasipecel89-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8fff31eb76768d5ab5e899f2d1039f2469bfd0f7cdaef16b2c1f9b5d794720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d802b431b800eb825ce13f68c09e2078b9b514e12366a1183d89e78a9a92c373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-toge46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f787c5d48dfcab425cffa372f1852d8d7200aa897ee54ec541d4d86fda51138a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126728 Malicious code in genetic_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582b07cff6761aa721f65c839d0c5c5db7bd75023a9d77d9df78d436f9abdd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lengko28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3254573250927b2abb6cc5fa206c57d1ebdd21203a0e2dc141f2cdb4258485fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123956 Malicious code in vera-gepuk4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6971e75935b707aaaad02b6ae3ba34d61d4082b457bdf4f8743d10805ed1877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123047 Malicious code in royal_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38627892b7313760a5acf5724c03f2b92edf209972aaa8b2ce701cc5a269a675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...