CVE-2023-25044

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

WordPress Jetpack Boost plugin < 3.4.7 - Admin+ SSRF vulnerability

Admin+ SSRF vulnerability discovered by Miguel Xavier Penha Neto in WordPress Plugin Jetpack Boost versions 3.4.7...

MAL-2025-192882 Malicious code in vapark-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cefe658424d45a9a7d0435722d098c258180f931cf3a92f945128d8cb83e0 The package vapark-boost-v1 was found to contain malicious code...

Malicious code in vapark-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cefe658424d45a9a7d0435722d098c258180f931cf3a92f945128d8cb83e0 The package vapark-boost-v1 was found to contain malicious code...

Malicious code in polaris-publish-vortex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce85812e6fc46ef9fcc86a5c7993e6c77bffb1288c327defb1b194eb04254c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-oka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ca49ccfef66e849e8e8b80b9658b092468a630b9bb4fae0c1650e25c769b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184682 Malicious code in olobc-uyg-ugiafaiduh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fe8e058080540d600dbb5535e0ab7c2b07d721d2f50aee626e39e3beee6f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea0a47e13393d80b0b45f63d753f87227c4064a9612546ab69f10e8f931d237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177211 Malicious code in poglymer-ogahh-failhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f216f2febb390f42ab1bfb5af1240b8c48af19a51611e7b3a58f55d211962d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-matania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd120299123fc8f7fbbef120199827379613db8717effa2799f14a86a18dcfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in idreesafzal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38ec514435dd7fdfef1b82e354c0a321c2608952bccc5862dbcb663f962a99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171896 Malicious code in sophialopez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8752e72e5f7fec10aa637f3fcd78f1e634dd0ecebe3af8475ee28b7ca080f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8a1b1bcd20803476b599e569e0fb84399651d47d1310b64291d7acac76d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162651 Malicious code in nokire-kilua6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a9d390d4257d3998e1a004dae0d5acff90732b9ff055cca0e570e510d21017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152199 Malicious code in akanabsi-abbala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 804c5c80aa204e617e77d77df2016511ad4a3b1a224dc65f3e3269620f91b51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161621 Malicious code in nabuf-otoimn-igofogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588f48e7cd8e66bbd45cfa2ec0e545ead0b1b0dbd13af060432c5f9309cdc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152431 Malicious code in alvino-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdf84b57b4bcdbde0af608fdbcd457c4fcb66f17493fc487a65049d183c3c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158687 Malicious code in lookingan-namakita73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c927dde8a87b6f2a892c4a91835e1f9943ff20f3b798b4180a319cea5acdb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...