Malicious code in okta-mangut50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c036b645fe5a880a2bd20062f77df272d990908327f69d22f13688cc16cffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56359 Malicious code in fitri-tahu55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29367f3fea8275003c228fa8d740a384e68ddbf200272b77e1b0fe4fb25cf75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rojak49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057a5ce2bac00ff0a6ae3a7ad194ccb8d1fe3f6d395a44bf69542ca62b081cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-rangi22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c165c9b9b128fd3d30e21563f820d84540e6e848ad63c49b2a48f9edb9d0de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-martabak32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2fb8101f4948035f7040eda6902393997c4b700b008fcd34adb8dad25f7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-liwet12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af87cfd75e192212e08a1b9b9404f59be131aeff130e4b1a46881bf25498439e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53898 Malicious code in ogi-tahu93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff051c112fc7686fb581a265f9db251a452346eb0afca6ee82328c0fea9d3196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Update Chrome now: 20 security fixes just landed

Google has released an update for its Chrome browser that includes 20 security fixes, several of which are classed as high severity. Most of these flaws were found in Chrome’s V8 engine—the part of Chrome and other Chromium-based browsers that runs JavaScript. Chrome is by far the world’s most...

EUVD-2025-19017

Malicious code in bioql PyPI...

Malicious code in @leaffm/automatically-gen-script (npm)

The package @leaffm/automatically-gen-script was found to contain malicious code...

CVE-2025-50048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2025-50048: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2025-22918: Exposure of Sensitive Information to an Unauthorized Actor

Polycom RealPresence Group 500 =20 has Insecure Permissions due to automatically loaded cookies. This allows for the use of administrator functions, resulting in the leakage of sensitive user information...

PT-2025-2235

Name of the Vulnerable Software and Affected Versions The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress versions up to, and including, 2.4.4 Description The issue allows authenticated attackers with Subscriber-level access and above to reset some of the plugin's settings due ...

CVE-2024-13651: Missing Authorization

The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxdeactivate function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with...

CVE-2024-13466: Improper Neutralization of Input During Web Page Generation

The Automatically Hierarchic Categories in Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autocategorymenu' shortcode in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This...

PT-2024-17288

Name of the Vulnerable Software and Affected Versions RapidLoad – Optimize Web Vitals Automatically plugin for WordPress versions prior to 2.4.3 Description The issue concerns unauthorized access and modification of data due to a missing capability check in several functions, including uucss data...

CVE-2024-11840: Missing Authorization

The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the uucssdata, updaterapidloadsettings, wpajaxupdatehtaccessfile, uucssupdaterule, uploadrules, getallrules,...

CVE-2024-11426: Improper Neutralization of Input During Web Page Generation

The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-list-number' shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-47365: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...