WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Arif Shaikh in WordPress Plugin Deposits and Partial Payments for WooCommerce versions = 3.1.0...

WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Arif Shaikh in WordPress Plugin CM Business Directory versions = 1.5.3...

WordPress File Uploads Addon for WooCommerce plugin <= 1.7.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Arif Shaikh in WordPress Plugin File Uploads Addon for WooCommerce versions = 1.7.3...

WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Arif Shaikh in WordPress Plugin Stock Manager for WooCommerce versions 3.6.0...

WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Arif Shaikh in WordPress Plugin ShopMagic versions = 4.7.2...

WordPress WP Email Capture plugin <= 3.12.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Arif Shaikh in WordPress Plugin WP Email Capture versions = 3.12.5...

Malicious code in arif-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df90e17c61ab51df82df9eb5bc656ecd63d4f82a3b06a31cde82045b94df7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71f1aac0ea150ef71bb8b209b8a4ed10264660615503f14a93481b35593302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704814fcc37c3354fcac8e81f5b8446d40e7c3513936d71a78921b8f0543c2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d1cae547fcf35766c7620a62ae7b7dfbfd9ef6e03fe78d9a8ed5068a6aef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bec8c4f1672f5a2356d9ad9eb3dddbcd27d9a7d4d1d3b87ed91acfcf2f8beb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709a3cd507b54c760ec5cff9eed9321ec4e5fb9a9075f896348e666b4c9c3e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e81425b2b748f1f7c80b24e26f7011313c9352654afc68c967b969b726239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1fb7afe24a7745bad69e025cf8395516b5c5c1318076193e509fb7f911235b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdd49fb1353f67ef4efffef230a679b6eea11ec13ee1f0d5a6e7508eeb1e71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ec5bfd59f8ae6d674720f66bc895ef9718e1132509f080c282d1b38f1d3134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7579178b5567ec5e87d5d4aed5f757c6cd623b2a74ba1e821f9edc40c20fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152722 Malicious code in arif-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a39e8a5c4b636a71f08f42be72ab5501cc3db6d5749873a670b76ccd77656f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152756 Malicious code in arif-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c57a89dd5efd6039fa90c8a733f3afa8daf84f0cbafce939ce95e1e0649ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...