9588 matches found
EUVD-2025-150409
The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'uscesexport' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials ex...
EUVD-2025-177471
Malicious code in omega-big-zero-export-java npm...
EUVD-2025-180323
Malicious code in array-async-export-lambda-transpile npm...
EUVD-2025-180455
Malicious code in alpha-integer-pi-assert-export npm...
EUVD-2025-179742
Malicious code in chi-short-export-assert-execute npm...
EUVD-2025-175946
Malicious code in throw-simple-old-export-info npm...
Malicious code in sun-throw-export-xml-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a8c5c8cb4363555683f11715c0cc35f6b75890f98cdcb908f646ad221baa6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176138
Malicious code in sun-throw-export-xml-java npm...
EUVD-2025-178961
Malicious code in export-decompress-integer-encrypt-void npm...
EUVD-2025-178958
Malicious code in export-resolve-theta-slow-refactor npm...
MAL-2025-189656 Malicious code in star-route-query-export-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189929 Malicious code in throw-simple-old-export-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7fa0e7015572a5c0c2140d2bd0a0d6d2e85a91da0626aa234799986419d1f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185433 Malicious code in alpha-integer-pi-assert-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34951bfb26b2bf73403b5a41d1b38d6088c5a6558b84230cd7bb1e901125fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175693
Malicious code in void-uglify-warn-export-zero npm...
EUVD-2025-176539
Malicious code in sandbox-export-integer-alpha-java npm...
EUVD-2025-179685
Malicious code in cold-cron-object-chi-export npm...
EUVD-2025-177790
Malicious code in mock-parse-earth-export-hot npm...
EUVD-2025-179278
Malicious code in dog-water-double-sudo-export npm...