MAL-2025-123777 Malicious code in ultimate_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5a297a4f0306c76da96f2e461569e8f8d282fba764b29af8ed2b92c01fcfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75376

Malicious code in ultimatecrawdad-appteadev npm...

Malicious code in ultimate_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500bed395e99dfe38d3f510a62552907f53f757663bc2bd47850c494cb083590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83871

Malicious code in ultimatesparrowz3n npm...

EUVD-2025-73210

Malicious code in ultimateorcaz3n npm...

EUVD-2025-73212

Malicious code in ultimatebobcatz3n npm...

EUVD-2025-73211

Malicious code in ultimatechickadeez3n npm...

EUVD-2025-73209

Malicious code in ultimatestingrayz3n npm...

MAL-2025-97079 Malicious code in ultimate_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf817aa941d76ad0635b84833e9e7fb6cec4739eed6332c52fddbf5a4f46aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65823

Malicious code in ultimategiraffez3n npm...

MAL-2025-81857 Malicious code in ultimate_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6dc5f59f97deaea526c73cdbc1afc47629f4facbd1c5dda983275f2df4aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51434

Malicious code in ultimate-green-buzzard npm...

EUVD-2025-51436

Malicious code in ultimate-copper-quelea npm...

EUVD-2025-51435

Malicious code in ultimate-crimson-tahr npm...

EUVD-2025-51433

Malicious code in ultimate-ivory-gazelle npm...

MAL-2025-71215 Malicious code in ultimate-green-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066c285b3fcb8bdb22ccf2a7eb06ac076a77684dfdc7b86edba20bfe767eb36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49162

Malicious code in ultimateflyingfishz3n npm...

EUVD-2025-49161

Malicious code in ultimateharez3n npm...

EUVD-2025-49160

Malicious code in ultimateharrierz3n npm...

WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Ultimate FAQ versions = 2.4.3...