EUVD-2025-144164

Malicious code in maka-anima-gualia npm...

EUVD-2025-144163

Malicious code in maka-anima-gugag npm...

EUVD-2025-144162

Malicious code in maka-anima-gunalia npm...

EUVD-2025-144155

Malicious code in makaia-anima-gugag npm...

EUVD-2025-144165

Malicious code in maka-anima-gua npm...

Malicious code in maka-anima-gualia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7720a9dd8e7e1ca11ae9e1bff898ae7cbb53133e3569a0f8f1a3e6d992e040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144161

Malicious code in makai-anima-gugag npm...

MAL-2025-159146 Malicious code in maka-anima-gua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11109f61410f79c95d089303cab85aea316e0004db1654846b3465ec10177c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maka-anima-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f450a5c87ee48aa93893468f67516912121b1f69f8afb892df424799d52f746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159156 Malicious code in makaia-anima-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeb858a92bf1523507141f19025b1d5d9c1d5ce7131e38cf1e8d2fa19c195e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2015-4435

Malware in sbrugna...

EUVD-2024-36528

Malicious code in bioql PyPI...

MAL-2025-36647 Malicious code in test-mlw2-woofy-anima-cages-greve (npm)

The package test-mlw2-woofy-anima-cages-greve was found to contain malicious code...

anima-pull2load (>=1.0.1, <=1.0.3), freighter (0.0.1) potentially affected by CVE-2024-51091 via seajs (>=2.0.0, <=2.2.1)

seajs NPM version =2.0.0, =1.0.1, =1.0.3 - freighter 0.0.1 Source cves: CVE-2024-51091 Source advisory: GHSA-PFR4-4397-3HG8...

anima-pull2load (>=1.0.1, <=1.0.3), freighter (0.0.1) potentially affected by CVE-2024-51091 via seajs (>=2.0.0, <=2.2.1)

seajs NPM version =2.0.0, =1.0.1, =1.0.3 - freighter 0.0.1 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...

CVE-2024-37248

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1...

CVE-2024-37248 WordPress Anima theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1...

CVE-2024-37248 WordPress Anima theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1...

CVE-2024-37248

CVE-2024-37248 (Anima theme, CryoutCreations) stores user-supplied input via the Anima theme’s web-page generation process, leading to a Stored Cross-Site Scripting (XSS) condition. Affected software: CryoutCreations Anima, version range from n/a through 1.4.1. Public data lists the vulnerability...

PT-2024-27411

Name of the Vulnerable Software and Affected Versions CryoutCreations Anima versions 1.4.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...