Malicious code in nosy-blush-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae8cb1c55363942d9795f98f56cd9ab2c58aabafaaa3494e44297d4cf7f2df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50917

Malicious code in yodelling-coral-fox npm...

EUVD-2025-52560

Malicious code in psychiatric-chocolate-fox npm...

EUVD-2025-55133

Malicious code in costly-coral-fox npm...

EUVD-2025-52856

Malicious code in overall-cyan-fox npm...

MAL-2025-70089 Malicious code in psychiatric-chocolate-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdec1b9113c2c5edf8eb21625ebcd25e8e39e653eea1bc4f498f637713156c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68192 Malicious code in extensive-violet-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e1154ae84195f308bf98af0e1083acbc077b517294a213bd03a881de7c96fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52545

Malicious code in puny-yellow-fox npm...

EUVD-2025-54541

Malicious code in everyday-amethyst-fox npm...

EUVD-2025-54946

Malicious code in delicious-fuchsia-fox npm...

MAL-2025-67437 Malicious code in contemporary-purple-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42b6c00a6f2fa1c759808554b6744a14352c6e0eb128355bfe7af0fcf8a30b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56608

Malicious code in vocationalfoxz3n npm...

EUVD-2025-49979

Malicious code in insufficientfoxz3n npm...

Malicious code in grim_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29bdd0ed79297b1d5a54dc968b6f8b9cf84c626269678f7d53944d90c9e6361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d9005743be37aa50affd9f901dad2298382c12e61714c4e8380903df59d7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49284

Malicious code in stripedfoxz3n npm...

EUVD-2025-48067

Malicious code in disturbingfoxz3n npm...

WordPress Orbit Fox Companion plugin <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Post Taxonomy vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Orbit Fox by ThemeIsle versions = 3.0.2...

CVE-2025-12045

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...

CVE-2025-12045 Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category and tag 'name' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output...