Malicious code in anastasia-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ac2f556a2b2b5e9bc9774ef8c502c13d4b0699a556c8d7ce13c5c04d4d05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amie-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f69162c6ff8c05657e4f43c57aadf6eba82ff111ec5cb4ef19d8ed3e81768b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79726

Malicious code in bernadine-wallet-store npm...

EUVD-2025-81445

Malicious code in katrina-wallet-store npm...

MAL-2025-99947 Malicious code in bert-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44075

Malicious code in didi-store npm...

Malicious code in didi-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-55024 Malicious code in didi-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...

MGASA-2025-0270 Updated xen packages fix security vulnerabilities

Double unlock in x86 guest IRQ handling. CVE-2024-31143 Xapi: Metadata injection attack against backup/restore functionality. CVE-2024-31144 Error handling in x86 IOMMU identity mapping. CVE-2024-31145 PCI device pass-through with shared resources. CVE-2024-31146 x86: Deadlock in vlapicerror...

CVE-2025-60204

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through = 2.4.3...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

Malicious Package

Overview rce-poc-test-honor-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

EUVD-2025-38111

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through = 2.4.3...

EUVD-2025-38112

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60204

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through = 2.4.3...

CVE-2025-60203

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60204 WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through = 2.4.3...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through = 2.7.6...

CVE-2025-60203

The CVE-2025-60203 entry concerns the WordPress Store Exporter plugin (woocommerce-exporter) with a Local File Inclusion flaw caused by improper control of filenames for include/require statements. Affected are Store Exporter versions up to and including 2.7.6. The vulnerability enables PHP Local...