MAL-2025-65583 Malicious code in tiara-kupang97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effa81ae72b379eecc8fc576e65cc97dfc70ab7af9239db50f23d05bf71ed9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46282

Name of the Vulnerable Software and Affected Versions Elastic Theme Editor plugin for WordPress versions up to and including 0.0.3 Description The Elastic Theme Editor plugin for WordPress is susceptible to arbitrary file uploads. This is due to a dynamic code generation feature within the proces...

CVE-2025-12637: Improper Control of Generation of Code

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

WordPress plugin Elastic Theme Editor 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

WordPress Elastic Theme Editor plugin <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by kr0d in WordPress Plugin Elastic Theme Editor versions = 0.0.3...

Malicious code in mere_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66618d23536f6882cb7a552ff1bc7ddb4a2f1636a54c4b2b2e7a0c2ffc3fe5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d969975f13e09c5d0a88a8512a88ca6fb9c08eb4cef434cd6c017b7805eb4eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223511963dedc6872fefd68dda4a74f99e6c836ef4bd5a3d61f0f9e8248ae55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a659793d3e34a86e15ad92dd9cd3a79c9eff05f810f5ca6535b8f4036909fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8e7f76cc1158b1f46a477d25bc069b57ba19991a4a3ec5c06042ebad332ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b773cab45ad0412cd9bdbc3ef7492697d375830d874ed6c69505be3153393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f21dac03da1d40a5935d9423e84410ca746ec122d7599bb1710e499ae1ff18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61493 Malicious code in traditional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a079749619fd72f83d44fe744d30a630485b6889d567a05e699a265bcdba09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0149ec636082f792ff45f1e23c930ede1f63216d30058cdeb8177e37f53d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61480 Malicious code in top_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab6c7a7d23a153dd78fe7c9c8fd1333df4496c0ffc46b91348f660b82acd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61275 Malicious code in shiny_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e9e076603b4edbb1aea31b5bcce2f638965976ff5b570566d898861e2323ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab6c7a7d23a153dd78fe7c9c8fd1333df4496c0ffc46b91348f660b82acd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a6a2a1be6b1fa9a28b85c420d6d60bb47e81ef409366e8dfa3dac1bfb9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44de98d83c9458d13ed7b7699131407e0dd52eb05aaf26eb091d7a4ecd38aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208abc7fc46e160809791619d67537098d88dbbef1f9e6a2d184c2f33fffc36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...