PT-2025-48562

Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav is susceptible to a Denial of Service DoS condition due to improper input sanitization of the scheduled at parameter when processing cron expressions. Manipulating this parameter with...

Belonging at Akamai: My Journey of Inclusion, Growth, and Connection

Discover how Akamai’s culture of belonging and inclusion empowers employees and drives innovation in tech...

CVE-2025-8994 WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'

The Project Management, Team Collaboration, Kanban Board, Gantt Charts, Task Manager and More – WP Project Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘completedatoperator’ parameter in all versions up to, and including, 2.6.26 due to insufficient escaping on th...

WordPress plugin WP Project Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

Malicious code in item-at-labigka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8adf8c58089d29307335b8e57d85b4be2f4f44eaaf028f5af171be49215e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69a80d4f4ce8e3335b765b8c05a6501d6bd9ee3ca2590ed5126e5db38e73a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b080c8a6352d1152a4dce40617d2a1fdd339bd7863fd683a647aa7630d1b21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c0674428dca91095609e29a55d87745d3b36ad5111086959eb6ae2b2cd416e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-oka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ca49ccfef66e849e8e8b80b9658b092468a630b9bb4fae0c1650e25c769b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87745aaac0357ce2091df305d10cd849015782459c4c10a20face3f7bf597d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183075 Malicious code in item-at-labigka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8adf8c58089d29307335b8e57d85b4be2f4f44eaaf028f5af171be49215e1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labkpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e0f6acbaebad9772f9f3834e3d5bf06bbb98f620f5e61fc908b655fd5b85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5267a3b47c206b3782dbc59c83f9b94b4bdf049b27becb26fb05727cd5de951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiokapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19648c7c98331724284fefdf96fc1b85dd997677958e4339a1266fbb56519de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf05a3571343a5a73ca71e2145a3c77b117f6d0c6318e06fa8f8f4d1281ece3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiagka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbfa12931d9e3626cd150a2bdb1543474d5a714cfc2c009f9cf10414ee8c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f126d6719843ce56bf6225716575b12c18f0a6beaae334ba94807c8e954d51a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147283

Malicious code in uaragifa-at-usafar npm...

EUVD-2025-147284

Malicious code in uaragifa-at-safar npm...

MAL-2025-76519 Malicious code in zain-menjes1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6048e8e2bdbe36531276618d84e56085bc9f85466753ed1d2bebe29a216595f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...