EUVD-2025-176929

Malicious code in publish-antimatter-augmentedreality-hawkingradiation npm...

EUVD-2025-180244

Malicious code in augmentedreality-mesosphere-style-loader-registry npm...

EUVD-2025-178329

Malicious code in isostasy-paleoclimatology-thuban-augmentedreality npm...

EUVD-2025-180241

Malicious code in augmentedreality-version-wavefunction-spawn npm...

EUVD-2025-180242

Malicious code in augmentedreality-vega-chai-cosmogenic npm...

EUVD-2025-178327

Malicious code in isostasy-slides-augmentedreality-jabbah npm...

EUVD-2025-179812

Malicious code in ceres-augmentedreality-iota-transport npm...

EUVD-2025-180246

Malicious code in augmentedreality-fetch-gravity-hawkingradiation npm...

EUVD-2025-179016

Malicious code in europa-augmentedreality-redgiant-halley npm...

EUVD-2025-177985

Malicious code in magellan-augmentedreality-webdriver-mocha-blitz npm...

EUVD-2025-177520

Malicious code in npm-global-sublimation-augmentedreality npm...

EUVD-2025-180065

Malicious code in biohacking-release-it-augmentedreality-janus npm...

EUVD-2025-177146

Malicious code in planckscale-augmentedreality-relay-planckscale npm...

EUVD-2025-179147

Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence npm...

EUVD-2025-179333

Malicious code in deneb-multiverse-augmentedreality-phoenix npm...

EUVD-2025-177732

Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar npm...

MAL-2025-185643 Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8670d124ec65024366529e678d71c9c6e75aef3c338716d5991bb1f5d1af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Plugin AR For WordPress Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin AR For WordPress, whi...

MAL-2025-47646 Malicious code in com.unity.xr.hands (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-7992

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...