WordPress Angel theme <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Theme Angel versions = 3.2.3...

Malicious code in itale-adci-akontolbapakmuullyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07be526858a961ca24ad2be94c49e05180a411e2a997ac3470f2332afd6fc432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bavybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca077f9cdc45de8cdc9ed8b1586f1c2a97960f66b50fe2cdf626c15af78a31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e584e675640192bfcdf5ee9cba032c98d29a49f4466e2c1bcba226b0e5cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daitajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a952cf9282e23a08ba9ff19ec953ca1b27cfe4abbaca938ea1ae685dc09f47cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a61903d7e2715b95d9139648a60f9f8c6e7dbc990e773635ce6942fc2a2a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguagaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6a9b6b0717d6550fcf161a8372dccab6b262ec945a2130e1ffe216ea0f9b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50529d6b024ee5d08a7d009c7925dd2eda3e4777ddd73b1110cc9ed4503d9015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-gib-giga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768445c5a75505d80e82f45ead562c007e3083a6e9c43e71df29fc1e0cc14cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183200 Malicious code in kisut-dfg-difzcfcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27325955e81bcd2b59d9ecc4ddde91ccdae86dc306eb25fe5c0e9e2015cc6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184263 Malicious code in modiov-khan-avcafivaivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2caf396e67b596841e0979956ffe36ea312e5e24d1f3a3f3e449592cfbc09ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184659 Malicious code in oliobc-uyg-afayafuyaicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcbd21c6252421d094ebff19e8621bf6423e595525bf92be541e0f8faa6e4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185045 Malicious code in sonic-kots-fudvitifagyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0c89549f18c7196e8a17b69fbe5a952bb6def7e4ba58510ff5fcca315ef8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a162c9f48ed5b861afc11a9018d73037446a26f0c3e9c88f61542ea893ec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184146 Malicious code in mlokok-lofki-afuhiubabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0a6be76cda215adf7690b144708ac91da4bf9c11c3b56aa447b91d981a398b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184540 Malicious code in mokok-lukaunai-hunanauaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fc1db946da4a4d542d1dceee5600e1cf0a00df4bffe2420f26cbf76e73ecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184632 Malicious code in odasv-knu-bonijavuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b131a1f1bc9526a0972a1159f9f4c097c2d3f8b3a0876d446e89210e66f501a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...