MAL-2025-132656 Malicious code in current_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54b5b2c772e76f6f43277f88ed5d636ccc212b46187e249b2ed7c6830d3e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61838

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61819

Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61832 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Malicious code in current_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6a07061d46208851fa5084da3f780d8578a7b0a97f7df7d5b0ca5591eacbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92630

Malicious code in currentfelidaez3n npm...

EUVD-2025-92628

Malicious code in currentherringz3n npm...

Malicious code in current_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3932af8b701605c0ad8f077d14427d801e82189da7f5f96f1db3311d89500362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79481

Malicious code in currentcrowz3n npm...

EUVD-2025-82302

Malicious code in currenttermitereplicateautomation npm...

Malicious code in current_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0e412adc58ae45c63e1b1717954e8e2be72ef467032f4e362084e3d5f23f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64666

Malicious code in currentapez3n npm...

EUVD-2025-64663

Malicious code in currentpantherz3n npm...

MAL-2025-84312 Malicious code in current_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ff019357eab64d9e25b63d8161211f7dbac0aaee41b519da1dfc431cf48d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12658

The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preloadprogressbar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping on user supplied attributes...

EUVD-2025-55057

Malicious code in current-plum-deer npm...

Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55055

Malicious code in current-tomato-lemur npm...

EUVD-2025-55059

Malicious code in current-coral-fish npm...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...