Malicious code in avminh-afi-famaonauog (npm)

Source: amazon-inspector 969203ce496189510885e71c1b43e87862a3a2b224d584e4342da435e746b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famaauog (npm)

Source: amazon-inspector cab5a2f881d45de9c0ee806713d194759389c78c2958c4b4d3cfcdfcb1e9a114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-fag (npm)

Source: amazon-inspector aa98af2d7f0d7eac1f080e8ce6c9685c659ca992e68053a90d784afa70231e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famanauog (npm)

Source: amazon-inspector 641d1855b4b90f8580348f92ff0171fa84bd7c1552288f02238a790d654c651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famauofaog (npm)

Source: amazon-inspector 4c8f8eb109cde9fe2b4380be986beabddefd83975e7e83bd4cd492ed2b5fc135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famauoaog (npm)

Source: amazon-inspector 514b035952ea88e943daa299ab515cbc68b9b2e064a947009b23a4caaa700d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famauoog (npm)

Source: amazon-inspector 1b00d52dd00e09ba244b75e5af185f37ca1e86c158ae3aa4e0535edcd5c66a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famauog (npm)

Source: amazon-inspector 3a3a4a185afd7906772598e7d305d9fe16994e3660e6eb5e1c6b5c3db3d5d380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in avminh-afi-famauaofaog (npm)

Source: amazon-inspector 0539ea588660682f5debe80fe402d9be623131edbad79d5103fd7596c2b4d05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in aviah-afi (npm)

Source: amazon-inspector dfd9f74682fb94523c4633a378fbf2f4111244ce8de0906bca44ba776325dff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-139018

Malicious code in poglymer-ogaih-afi npm...

Malicious code in aviah-afi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd9f74682fb94523c4633a378fbf2f4111244ce8de0906bca44ba776325dff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153022 Malicious code in aviah-afi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd9f74682fb94523c4633a378fbf2f4111244ce8de0906bca44ba776325dff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-31633

Malicious code in bioql PyPI...

CVE-2024-10877

The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.92.0. This makes it possible for unauthenticated attackers t...

CVE-2024-13123

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13122

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13123

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13122

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13122 AFI < 1.100.0 - Admin+ Stored XSS

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...