50773 matches found
CVE-2025-64271
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
CVE-2025-64271 WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
EUVD-2025-176806
Malicious code in radiometric-csrf-odin-tool npm...
EUVD-2025-179476
Malicious code in csrf-bootes-html-webpack-plugin-ichnology npm...
Malicious code in tardigrade-perseus-scripts-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cf3002a682a40e9db25a7ab21c0c0d43bc2a7a7b6565671c25154c0976ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175640
Malicious code in wasat-rimraf-csrf-halley npm...
MAL-2025-189069 Malicious code in radiometric-csrf-odin-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e8818bb3c935c8b7d48fef4e1c34d7c3551bae906e325a0308948fdd96d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189812 Malicious code in tardigrade-perseus-scripts-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cf3002a682a40e9db25a7ab21c0c0d43bc2a7a7b6565671c25154c0976ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175421
Malicious code in zenobia-rate-limiter-cosmos-csrf npm...
Malicious code in xo-csrf-radiant-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c1bd2a4a7e5e0d89c6e97c3243f89b4b6801a28f85c0a3bb946840fa5efd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178293
Malicious code in jasmine-karma-innercore-csrf npm...
EUVD-2025-179475
Malicious code in csrf-callisto-hapi-nextjs npm...
EUVD-2025-179472
Malicious code in csrf-farout-backend-fomalhaut npm...
EUVD-2025-179474
Malicious code in csrf-carina-technocracy-areology npm...
EUVD-2025-179470
Malicious code in csrf-relay-miranda-halley npm...
MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175473
Malicious code in xo-csrf-radiant-halley npm...
Malicious code in lyra-xanthus-csrf-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0400e33310dc0a2fd44e038192baefeffcefb683ae979ca17aa648245da1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...