EUVD-2025-123140

Malicious code in publish-epimetheus-redis-firebase npm...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113616

Malicious code in firebase-eleventy-protractor-vortex npm...

EUVD-2025-111509

Malicious code in lyra-elara-mongodb-firebase npm...

MAL-2025-142492 Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149668 Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-1064

Malware in sbrugna...

EUVD-2018-5786

Malware in sbrugna...

EUVD-2023-43880

Malicious code in bioql PyPI...

EUVD-2024-48517

Malicious code in bioql PyPI...

EUVD-2024-1325

Malicious code in bioql PyPI...

EUVD-2022-2377

Malicious code in bioql PyPI...

EUVD-2025-24963

Malicious code in bioql PyPI...

EUVD-2024-34200

Malicious code in bioql PyPI...

EUVD-2024-52417

Malicious code in bioql PyPI...

EUVD-2022-1387

Malicious code in bioql PyPI...

EUVD-2024-1772

Malicious code in bioql PyPI...

EUVD-2024-3188

Malicious code in bioql PyPI...

CVE-2025-7665

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handlemofirebaseformoptions' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated attackers to update the default role to...

WordPress Miniorange OTP Verification with Firebase plugin 3.1.0-3.6.2 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Miniorange OTP Verification with Firebase versions 3.1.0-3.6.2...