Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139081 Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117021

Malicious code in top-violet-hummingbird npm...

MAL-2025-123679 Malicious code in top_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f265affb641ffc02ab87d8db2548065e04e41c52eb46b1fb686273d366b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74150

Malicious code in topzebraaquamarine-79 npm...

EUVD-2025-78094

Malicious code in topbugz3n npm...

EUVD-2025-80274

Malicious code in topgrasshopperreplicateautomation npm...

EUVD-2025-73262

Malicious code in tophummingbirdz3n npm...

EUVD-2025-73261

Malicious code in topunicornz3n npm...

Malicious code in top-azure-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e29006e02a05904a4113e34ede83fb2ff35963c96164270fc55813e8f3d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51499

Malicious code in top-azure-zebra npm...

Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71150 Malicious code in top-azure-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e29006e02a05904a4113e34ede83fb2ff35963c96164270fc55813e8f3d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71151 Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51498

Malicious code in top-yellow-amphibian npm...

Intel Sues Ex-Engineer for Stealing 18,000 ‘Top Secret’ Files

Intel, the leading computer chip maker, has filed a lawsuit seeking at least $250,000 in damages from a…...

Cloudflare Scrubs Aisuru Botnet from Top Domains List

For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon , Apple , Google and Microsoft in Cloudflare's public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites list. The chie...

Credentials and Misconfigurations Behind Most Cloud Breaches, Says AWS

New AWS report data reveals the top four security failure points in the cloud, including vulnerability exploitation 24%…...

CVE-2025-12412

The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on th tbnajaxadd function. This makes it possible for unauthenticated attackers to update the plugin's setting...

WordPress Top Bar Notification plugin <= 1.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Top Bar Notification versions = 1.12...