EUVD-2025-64002

Malicious code in flying-copper-swallow npm...

MAL-2025-95740 Malicious code in okay_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57d9d77c8e58937a96cb01b424fbc1331a2b4847013c558a16bf13de3967fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f216cd5658241ba3b7c703e3d01f780e8299f54476524430860505483718a6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86009

Malicious code in flyingrattlesnakez3n npm...

EUVD-2025-54279

Malicious code in flying-amaranth-gerbil npm...

EUVD-2025-54277

Malicious code in flying-coffee-buzzard npm...

EUVD-2025-54275

Malicious code in flying-moccasin-lizard npm...

Malicious code in flying-coffee-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8203116f266de34e570edf87f871a2a61280a744da4c62f27f6d5c382dcbb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54278

Malicious code in flying-amethyst-gayal npm...

EUVD-2025-54274

Malicious code in flying-plum-hornet npm...

Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54276

Malicious code in flying-indigo-gorilla npm...

EUVD-2025-54273

Malicious code in flying-purple-asp npm...

Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68375 Malicious code in flying-plum-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359ee178e19f927ae69d98f6fa61163a1a6ea860074c5bf1ea253723e82b0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68372 Malicious code in flying-coffee-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8203116f266de34e570edf87f871a2a61280a744da4c62f27f6d5c382dcbb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59597

Malicious code in flyingkingfisherz3n npm...

WordPress Flying Images plugin cross-site scripting vulnerability

WordPress Flying Images plugin is a WordPress plugin that is mainly used to optimize and delay loading images to improve page loading speed. WordPress Flying Images plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping ...

WordPress Flying Images plugin <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Karuppiah Sabari Kumar - Mobikwik in WordPress Plugin Flying Images versions = 2.4.14...

CVE-2025-11927

The Flying Images: Optimize and Lazy Load Images for Faster Page Speed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for...