MAL-2025-156622 Malicious code in inufgi-gobali-jani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b18fb5c74b702e04bc5ac1f1efb958c40419ddcecb4c4f386adb17fe91ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-jani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4e81c80c5d7551727746b6fc00a01f805a3172086b5ed3df88284327e44f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-3398

Malicious code in bioql PyPI...

CVE-2025-23764

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

CVE-2025-23764

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

CVE-2025-23764

CVE-2025-23764 describes a Missing Authorization vulnerability in the WordPress plugin Copy Move Posts (copy-move-posts) up to version 1.6. The initial data notes a lack of authorization controls but provides no technical details, affected versions beyond

This 10-year-old Boy becomes the youngest Bug Bounty Hacker

"Talent has no Age Limit" That’s what I said for a 10-year-old Finnish boy on our official Facebook page while sharing his recent achievement with our readers i.e. Winning $10,000 bug bounty from Instagram. Last Tuesday when we at The Hacker News first acknowledged this talented boy and the flaw ...

Unfixed XSS vulnerability at www.interspire.com

Security researcher Jani, has submitted on 14/04/2009 a cross-site-scripting XSS vulnerability affecting www.interspire.com, which at the time of submission ranked 11350 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currentl...