WordPress plugin “Auto Amazon Links” – Amazon Associates Affiliate Plugin security vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An arbitrary file read vulnerability exists in the WordPress plugin Auto Amazon Links - Amazon...

CVE-2025-12967

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS users. We recommend customers...

CVE-2025-12967

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS users. We recommend customers...

CVE-2025-12967

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS users. We recommend customers...

Malicious code in democratic_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adc73a2b067dce0c7ef34b7d16f7b8eaef2eaa773d3aeab90e83673672f2488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce3310630a3661d4031f8a9b8b984bff3bddcfb731be8c30f5bd8219b4977ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84956a4c43cd2918baa4d0666d9075d8eb8dc52dc67e7e90c5572d87360c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60448 Malicious code in famous_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7172fc9913c7f7dda338a859b27a1e2b60b5a1ffa47a7017f266ac19070d3b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c760f4ea94aaf2d7bcddf456c4414bb0ad457080c8db8c0686a97b6298f6f79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827b8da7bb445180ad6f2680a5557be9f3dfddf8c92f8cf40824dbfe4e312d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940f91dae4901da23794377633f243659eec2a20405ef736fd11bf81a539682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01312ce313b035f7407e8d7de4438088181514ebab7b29fa0bc45d897bed7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081ddc2652248216769a80be5bd83ae745550db3365fae0e56d1ad87eb7de70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-nasisayur62-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e5bad8e962e4cf55b45954c19560bce7c6afd6ddfb5c2a73ef6fd7ecd8c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-peyek64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417900d5d7c7f6870dab46d77573cfa97d8576ec6abb87f31d9c443be6da11af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3fbab387ce7b00dd1a876367ea8c4ad0d93747204ee0594f801ce60032db01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tempe6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0b9599e49e53960de8c28bfff18b604bd6820adf41c7abc102130c7c029d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f7fc563ce02d030cc108df76e4f0cad5883f8dd2ac11f07386a4a20b510b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59306 Malicious code in vida-ongol-ongol96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f081a3f12d326f6ff1ce7fba65dbab9abfef85bf72eaa7badf961c92cbe2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d130b018cfb66af01aa730269326abd321a00ad08317e26a119d69c6b4d9387f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...