EUVD-2025-113616

Malicious code in firebase-eleventy-protractor-vortex npm...

EUVD-2025-111509

Malicious code in lyra-elara-mongodb-firebase npm...

MAL-2025-142492 Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-jasmine-firebase-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdbb37bda77e42c09b559a883ef4a07bdfb334392fffb8017a7f5a85f82803a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-1064

Malware in sbrugna...

EUVD-2018-5786

Malware in sbrugna...

EUVD-2023-43880

Malicious code in bioql PyPI...

EUVD-2024-48517

Malicious code in bioql PyPI...

EUVD-2024-1325

Malicious code in bioql PyPI...

EUVD-2022-2377

Malicious code in bioql PyPI...

EUVD-2025-24963

Malicious code in bioql PyPI...

EUVD-2024-34200

Malicious code in bioql PyPI...

EUVD-2024-52417

Malicious code in bioql PyPI...

EUVD-2022-1387

Malicious code in bioql PyPI...

EUVD-2024-1772

Malicious code in bioql PyPI...

EUVD-2024-3188

Malicious code in bioql PyPI...

CVE-2025-7665

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handlemofirebaseformoptions' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated attackers to update the default role to...

WordPress Miniorange OTP Verification with Firebase plugin 3.1.0-3.6.2 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Miniorange OTP Verification with Firebase versions 3.1.0-3.6.2...