CVE-2026-14842

The CVE-2026-14842 entry concerns the Events Made Easy WordPress plugin prior to version 3.1.2. The root cause is that the payment authorization token is not bound to the specific payment record being charged, enabling an unauthenticated attacker to pay a lower amount for a cheap booking while a ...

Buying TikTok views or followers? Here’s what you’re really getting

A whole industry has sprung up around selling TikTok "growth." Cheap views by the hundred, pre-made ad accounts, and polished sales pages promising a repeatable path to serious revenue. None of it is officially sanctioned by TikTok, and depending on what you're buying, you could end up wasting...

The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are

The US military has long known that cheap fixes could stop location data from exposing its troops. It adopted almost none—and now says adversaries are using the data to target soldiers during a war...

The US Must Stop Underestimating Drone Warfare

The future of conflict is cheap, rapidly manufactured, and tough to defend against...

EUVD-2025-117496

Malicious code in cheap-indigo-sawfish npm...

Malicious code in cheap-indigo-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97990c3dbd394d32a692511123a3cdffa4c9e1432225671b64623153e99226ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-cyan-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db7c5889328660f36965d0228ec4363d33ebd3da5ec1550334b53a3a99b9e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117495

Malicious code in cheap-lavender-newt npm...

EUVD-2025-117497

Malicious code in cheap-cyan-clam npm...

EUVD-2025-100769

Malicious code in cheapdinosaurz3n npm...

EUVD-2025-92875

Malicious code in cheapbugz3n npm...

EUVD-2025-74834

Malicious code in cheapdoveturquoise-100 npm...

EUVD-2025-77676

Malicious code in cheapanglerfishindigo-51 npm...

MAL-2025-100354 Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79659

Malicious code in cheapcougarz3n npm...

EUVD-2025-79657

Malicious code in cheapmoosez3n npm...

EUVD-2025-82527

Malicious code in cheapfalcondumbs npm...

EUVD-2025-82526

Malicious code in cheaphedgehogdumbs npm...

EUVD-2025-71159

Malicious code in cheapgrousez3n npm...

Malicious code in cheap_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281bc5db2be94120f275ce94a3d558a0d5d101b1e6eb76bc85c918fa8a37e7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...