MAL-2025-185554 Malicious code in areology-eleventy-cassini-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in export-psi-zeta-upsilon-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f1ef51d519c74b84c078dc5bf56f9e105291710857d19dda790846f4d0bccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190246 Malicious code in wavefunction-ariel-pavo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912a524aeee27b07cbb82ea663ed0e11889501b10f31b17df11d60deeb0c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in view-warn-bash-rain-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b4c467de8a271769bc1a336e123725feaf0bea5e2e1785990ba6cc65d96953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Use of Incorrectly-Resolved Name or Reference (CVE-2022-27778)

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CVE-2025-12377: Missing Authorization

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-leve...

PT-2025-46818

Name of the Vulnerable Software and Affected Versions Envira Photo Gallery versions up to and including 1.12.0 Description The Envira Photo Gallery plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check in several functions. Authenticated...

Siemens SIMATIC S7-1500 Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2013-4235)

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

MAL-2025-184561 Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183040 Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184583 Malicious code in odasv-kinu-bobc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7600c7ee51ab986eb8d25bb13260f147dafbb482f6052a8c7e085917ad0ee24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183318 Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daijuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d6cc67335e15d7b4460c1bfe24eb103fea29e8bcaba7e3563d417d2cc1f0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafegxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d47998599da8a67bf866de1cd804d8298c5f032d07cbca011bf79d5f3eb6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183062 Malicious code in item-at-labieagyeyabbjpka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c0674428dca91095609e29a55d87745d3b36ad5111086959eb6ae2b2cd416e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-daka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f9fa2513e8f5dc7b7c516a786806b4ccf7a49d8bf782d99ab100708d8790e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dakiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7beecbd642954cc1033c874905fbfd1c3137f74a9ab536b54cf8ee6bb7ae2846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b6d9052bf699b236ff18ab5d569a6e2d2027ff5d7359827ff62c105427e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192e2e143266b7f3cb210d5e77dd1830ccf8e0fbca3eb206aa7f93e8ffea518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a08457090344e07fbede7d87df122e366571025387f66c1e07173dd3b80d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...