CVE-2025-12901

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...

EUVD-2025-177420

Malicious code in ora-release-it-ichnology-subscription npm...

EUVD-2025-179087

Malicious code in equinox-cosmicsilence-subscription-redis npm...

EUVD-2025-177943

Malicious code in markdownlint-subscription-changelog-socketio npm...

EUVD-2025-176149

Malicious code in subscription-proxima-levels-phenomic npm...

EUVD-2025-176152

Malicious code in subscription-jsonp-metabolomics-hawkingradiation npm...

MAL-2025-186817 Malicious code in eris-perseus-subscription-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b261a9fb861a3208da1f028fe4c2ebee2a90df3ce636dcd100ab6c0f0ceb8c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178948

Malicious code in extremophile-ophiuchus-rollup-plugin-subscription npm...

EUVD-2025-176006

Malicious code in terser-subscription-kuiperbelt-cryptography npm...

EUVD-2025-177839

Malicious code in middleware-nightwatch-virgo-subscription npm...

EUVD-2025-176151

Malicious code in subscription-nightmare-nightmare-webdriver-manager npm...

Malicious code in eris-perseus-subscription-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b261a9fb861a3208da1f028fe4c2ebee2a90df3ce636dcd100ab6c0f0ceb8c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-perseus-antd-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81323bf2213ec382936f574183e15746e0cdd853bd816099879b73532eb5af70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176156

Malicious code in subscription-asteroid-paleoanthropology-slides npm...

EUVD-2025-176564

Malicious code in sagitta-child-process-subscription-vuetify npm...

EUVD-2025-178793

Malicious code in galaxy-xanthus-perseus-subscription npm...

EUVD-2025-177743

Malicious code in mui-meissa-subscription-event npm...

EUVD-2025-176153

Malicious code in subscription-interstellarmedium-toml-neuromorphic npm...

EUVD-2025-179978

Malicious code in boson-module-subscription-scripts npm...

MAL-2025-186934 Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...