MAL-2025-94898 Malicious code in husky_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944422a8547adf52e3b9bb0f4effadb1d9f7a44766b66cddaa2b48431a56a964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94895 Malicious code in husky_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bc3a913e1a787670a0e62bf48207be5db0ab916d6f6017c6725699b9bb96da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63656

Malicious code in huskykangarooz3n npm...

EUVD-2025-63653

Malicious code in huskytarantulaz3n npm...

Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53896

Malicious code in husky-rose-gamefowl npm...

EUVD-2025-53902

Malicious code in husky-amber-cod npm...

MAL-2025-68752 Malicious code in husky-indigo-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495a320c292f8587f342df067537e16d0b2695342d9a8c15d2c298a51165da60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53898

Malicious code in husky-gold-bear npm...

MAL-2025-68750 Malicious code in husky-copper-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca17b8037d1bcccfa9c9737087b38ec401dcb8992a088bafdc814e2c252a303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53897

Malicious code in husky-indigo-dragonfly npm...

MAL-2025-68751 Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53901

Malicious code in husky-apricot-walrus npm...

EUVD-2025-53899

Malicious code in husky-copper-dingo npm...

EUVD-2025-53900

Malicious code in husky-black-penguin npm...

EUVD-2025-47213

Malicious code in huskymousez3n npm...

CVE-2025-11735

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

WordPress HUSKY plugin <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter vulnerability

Unauthenticated SQL Injection via phrase Parameter vulnerability discovered by LionTree in WordPress Plugin HUSKY versions = 1.3.7.1...

CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...