5246 matches found
WordPress WP Import plugin <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Author+ Sensitive Information Exposure vulnerability discovered by M Indra Purnama type5afe in WordPress Plugin WP Ultimate CSV Importer versions = 7.33...
EUVD-2025-114753
Malicious code in csv-rollup-dotenv-yonder npm...
Malicious code in csv-ultra-wezen-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122999
Malicious code in quark-csv-draco-procyon npm...
Malicious code in fornax-mdx-antares-csv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc2e57ea17da85eaf0b5d0af0cc4aea98bb7840071c4378fe534257b87dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113528
Malicious code in fork-csv-standard-async npm...
EUVD-2025-113324
Malicious code in galaxy-csv-middleware-levels npm...
Malicious code in upgrade-csv-gulp-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115387
Malicious code in charon-csv-development-equinox npm...
Malicious code in tethys-mira-csv-impulse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121305
Malicious code in tethys-mira-csv-impulse npm...
EUVD-2025-114762
Malicious code in csv-markdownlint-npm-grus npm...
EUVD-2025-114117
Malicious code in eleventy-csv-envconfig-sagitta npm...
EUVD-2025-114767
Malicious code in csv-changelog-dagda-rimraf npm...
EUVD-2025-124388
Malicious code in node-sass-csv-nconf-algol npm...
EUVD-2025-114765
Malicious code in csv-europa-bellatrix-janus npm...
Malicious code in shelljs-csv-antares-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114749
Malicious code in csv-test-subscription-nebula npm...