MAL-2025-65289 Malicious code in significant_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fe8cc7faa76759d94b418e03aa3cbb594e554ba79b9cf0815c7f8214002fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66525 Malicious code in zul-lupis44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcb65e4678af516223789a6be7bfdae5801aea0ac80e5c2718fb47a544a30c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress plugin Elastic Theme Editor 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

PT-2025-46282

Name of the Vulnerable Software and Affected Versions Elastic Theme Editor plugin for WordPress versions up to and including 0.0.3 Description The Elastic Theme Editor plugin for WordPress is susceptible to arbitrary file uploads. This is due to a dynamic code generation feature within the proces...

CVE-2025-12637: Improper Control of Generation of Code

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

WordPress Elastic Theme Editor plugin <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by kr0d in WordPress Plugin Elastic Theme Editor versions = 0.0.3...

Malicious code in alive_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f21dac03da1d40a5935d9423e84410ca746ec122d7599bb1710e499ae1ff18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1735d9047b28f543d7bb4a99aa6873b0345452a9ba9b483d8101223388085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0149ec636082f792ff45f1e23c930ede1f63216d30058cdeb8177e37f53d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8e7f76cc1158b1f46a477d25bc069b57ba19991a4a3ec5c06042ebad332ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872d0f6f58fb28a745e60715224f3bd2f27bd9f21cc276f7fd459369e4c88ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b773cab45ad0412cd9bdbc3ef7492697d375830d874ed6c69505be3153393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27d274d296458a7ac08d23a09d4a3eea3d43f57544f3196fb41fd83fffb8d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac26f2d009641adf1308f0dc1eaaffb648828c1ca4dc2766ca0f398fa2b491d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b80251c443ea1755ef86a606db7522011dbbd59ef7de40a040752911c77e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a659793d3e34a86e15ad92dd9cd3a79c9eff05f810f5ca6535b8f4036909fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223511963dedc6872fefd68dda4a74f99e6c836ef4bd5a3d61f0f9e8248ae55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d969975f13e09c5d0a88a8512a88ca6fb9c08eb4cef434cd6c017b7805eb4eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc36cdc0d5059628003a0affddf90a97efa572dbfd74bd3d70c1e0dd9d971f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab6c7a7d23a153dd78fe7c9c8fd1333df4496c0ffc46b91348f660b82acd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...