CVE-2026-22390

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

CVE-2005-1632

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

Malicious code in early_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8312ccd88140f4df3c550d05a635504bdd7245cad8ee52a74e30773e270a605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4a0da19a02ce09191d24fc0f6c82a3e21eb0dc7a4d2ec0172ee3d0dcac20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97541

Malicious code in joyouscheetahz3n npm...

EUVD-2025-98062

Malicious code in inappropriatecheetahz3n npm...

Malicious code in bored_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130313 Malicious code in spotty_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a14d4a1e4bc38e13bd3b13759457796cb9a5cf897866d2030f09f94915bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125216 Malicious code in bored_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102092

Malicious code in spottycheetahz3n npm...

EUVD-2025-94906

Malicious code in stuckcheetahz3n npm...

EUVD-2025-92107

Malicious code in experimentalcheetahz3n npm...

EUVD-2025-91815

Malicious code in formalcheetahz3n npm...

EUVD-2025-88900

Malicious code in scatteredcheetahz3n npm...

EUVD-2025-74514

Malicious code in irrelevantcheetahviolet-63 npm...

EUVD-2025-75500

Malicious code in supportingcheetah-appteadev npm...

EUVD-2025-76846

Malicious code in firmcheetah-appteadev npm...

EUVD-2025-75205

Malicious code in workingcheetah-strongdev npm...

EUVD-2025-75282

Malicious code in vicariouscheetah-notthedev npm...

EUVD-2025-76941

Malicious code in everydaycheetahreplicateautomation npm...