MAL-2025-118746 Malicious code in appalling_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1893af02c92c630f13e4cfcc86d311e48d62ef841f074deb57c30ef7c863f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ba3c93341c86ef37421446b1ed4b2d0fc50c1c4add487b4187049b2693a01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_jaguar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce44741c0658b53cef7176e9341b35ed300ef2d78f91522f5ebccc5f5153fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106714 Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08721c07fc194ca2871e8dceb2d3a11f712194eb61cd11f1d0a4fc885d1894e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-tahu76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970c082fa6d01348d26db594285719f9d86fac85c67b8d1d4b367f10aadb3e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386191d6e8cd1e0747344299f543de6621107b909f4c065d948608bef9dc10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74412 Malicious code in maya-nasipecel51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494e8f065c8d1b17a6553afbb411ee781d5eadc74e3622cd17965e95224d1739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad842ebb3fc7d678631d2a6e474070faf44e64828321f29659cf571412b7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68943 Malicious code in intense-salmon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeebe3ca6db3b7fa38b4048823bab421cfaf238345260268ea12bdeff2fe28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea50adcb290c9fa7858acf9a1ae8c04abc3eb878a2337df5747a2621be48eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64385 Malicious code in nadia-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cba47d5bed1917dbae0d59417ccca8dbc27333a3f85ce9cbcaf1adaecfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jamblang33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3872ebf5ed10cc9732290e8eccf2d7a423a5278cda2e336bacdad17f48745 The package bella-jamblang33-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2023-58617

Malicious code in bioql PyPI...

CVE-2024-13451

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via file uploads due to insufficient directory listing...

WordPress plugin File Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Design/Logic Flaw

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents...