EUVD-2025-54653

Malicious code in elegant-magenta-beaver npm...

Malicious code in allied-moccasin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37e35c7eefee0d4b16c8347a56765021498806a24172680838e810f29f8c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56767

Malicious code in varyingbeaverz3n npm...

MAL-2025-61698 Malicious code in yodelling_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f000c81cbaa2afb573c33015b814423ca71fa703dfa86ea382c8ac7936441be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61247 Malicious code in select_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460f84d4d25d427e5df768d6c6265b8f6f03169fb10dd6fad8abdf69ca296ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50127

Malicious code in gentlebeaverz3n npm...

EUVD-2025-50336

Malicious code in earlybeaverz3n npm...

EUVD-2025-49641

Malicious code in plainbeaverz3n npm...

EUVD-2025-50491

Malicious code in continuousbeaverz3n npm...

MAL-2025-59896 Malicious code in zygotic_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609c57dc88f68731f4d9f872cedd0b88c2581b28054a2f714fa3c718e5258ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56386 Malicious code in fragile_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddd82bf7d2646caa0edb53ad7b664c5c7f0f9302b6cf26df74144929ee68a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44079

Malicious code in zygoticbeaverz3n npm...

MAL-2025-58090 Malicious code in olympic_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 948921b543037cf7e560ac5648f7a21a874d494350c6dd8d810ce697db50e617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37593177995585f17ae2fd06046a6be730272ac009aa0bf924f7573efa463f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47589

Malicious code in fragilebeaverz3n npm...

CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

WordPress Beaver Builder Plugin (Starter Version) plugin <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'autoplay' vulnerability discovered by Sulabh Jain pentestmonkey11 in WordPress Plugin Beaver Builder Plugin Starter Version versions = 2.9.2.1...

EUVD-2025-35678

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...