Malicious code in awake-violet-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26ceefd9ce75caa69a260fd1ae7e76c587d10f01b4d9b6deeb6106bab27021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55752

Malicious code in awake-orange-dormouse npm...

EUVD-2025-55750

Malicious code in awake-scarlet-termite npm...

Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55753

Malicious code in awake-olive-bonobo npm...

EUVD-2025-55749

Malicious code in awake-violet-snipe npm...

EUVD-2025-55748

Malicious code in awake-yellow-kingfisher npm...

MAL-2025-66898 Malicious code in awake-plum-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6670aad93da1baf1e3151902772c9ec22885ad18a5ccc55d2319bef3766e267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66897 Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59999 Malicious code in awake_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941c625c097be063d0c51200492d9ab929d443b678372621c6b741273bb01727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50670

Malicious code in awakepartridgez3n npm...

Partner Perspectives: Awake Security and Carbon Black Deliver Comprehensive Threat Detection and Response

Rudolph Araujo is the Vice President of Awake Security. Even relatively unsophisticated attackers today use tools, tactics and techniques that make them difficult to uncover. For instance, the use of non-malware tools, such as PowerShell, psexec and Python, places a burden on security teams to...

WordPress Themes Awake Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Themes Awake. A remote attacker can exploit this vulnerability to...

WordPress Bonkersbeat / Method / Awake Arbitrary File Download

Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk Myblog : http://xbadgirl21.blogspot.com/ + DESCRIPTION : ...

Awake 3.3 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download

The awake WordPress theme was affected by a dl-skin.php mysitedownloadskin Parameter Absolute Path Traversal Remote File Download security vulnerability...