516 matches found
MAL-2025-192876 Malicious code in suntik-tiktok (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da93e8ade1dc4062a4b72f46b9946cbae644e75e36e6c77954977678238b24ab The package suntik-tiktok was found to contain malicious code...
Malicious Package
Overview vue3-tiktok is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious Package
Overview vue2-tiktok is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Tiktok Feed versions = 1.0.23...
@actbase/react-native-tiktok contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
MAL-2025-190712 Malicious code in @actbase/react-native-tiktok (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30674f65fae1c8cebcf4d015086a943502402cc93f3559653c406c592a62366 The package @actbase/react-native-tiktok was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198775
Malicious code in @actbase/react-native-tiktok npm...
CVE-2025-66110
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...
EUVD-2025-198444
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.22...
CVE-2025-66110
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...
CVE-2025-66110
CVE-2025-66110 affects the WordPress plugin TikTok Feed (b-tiktok-feed) up to version 1.0.22, labeled as a Missing Authorization / Broken Access Control vulnerability. The issue arises from misconfigured access control security levels, enabling unauthorized access per the CVE description. Public ...
CVE-2025-66110 WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...
CVE-2025-66110 WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...
PT-2025-47772
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.22...
WordPress plugin Tiktok Feed 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Malicious code in new-tiktok-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3257e6436c4ec191b344e85593e5bea0a9e5b8669151176a87eee554c53ca86 The package new-tiktok-h-ack-working-2023-march was found to contain malicious code...
MAL-2025-48943 Malicious code in new-tiktok-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3257e6436c4ec191b344e85593e5bea0a9e5b8669151176a87eee554c53ca86 The package new-tiktok-h-ack-working-2023-march was found to contain malicious code...
A week in security (October 13 – October 19)
Last week on Malwarebytes Labs: Prosper data breach puts 17 million people at risk of identity theft Under the engineering hood: Why Malwarebytes chose WordPress as its CMS Video call app Huddle01 exposed 600K+ user logs Mango discloses data breach at third-party provider Roku accused of selling...
TikTok scam sells you access to your own fake money
This scam starts in your TikTok DMs. A brand-new account drops a melodramatic message—terminal illness, last goodbye, “I left you some assets.” At the bottom: a ready-made username and password for a crypto site you’ve never used. It’s designed to feel urgent and personal so you tap before you...