CVE-2026-62086

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

EUVD-2026-96491

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

CVE-2026-62086

The WordPress Juno theme versions

CVE-2026-62086: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Juno versions = 2.25...

Malicious Package

Overview lint-janus-juno-blueshift is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in lint-staged-sirius-xo-juno (npm)

Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lint-janus-juno-blueshift (npm)

Source: amazon-inspector 09c4d24d6c0937c0a916af5b388852eb2c5e7fb318480dba1e23ab03c3047296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in library-supernova-eigenstate-juno (npm)

Source: amazon-inspector 600d73bcef76b7b349db81780081a9226a31fc649ff7b35e1e117a44abc7bc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lacerta-blackhole-juno-capella (npm)

Source: amazon-inspector 5b6cfebe89ce7d38d781833a8bd92a48a66f15d480fc2a96d6ab3590252a7b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-uglify-js-tethys-thermochronology (npm)

Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-photon-nebula-sublimation (npm)

The package juno-photon-nebula-sublimation was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in juno-seismology-socketio-electron (npm)

The package juno-seismology-socketio-electron was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-nconf-odin-xanadu (npm)

Source: amazon-inspector e1eca6f10b55a041a9492c18f053fae16ba7db314667deffa78b1a301e3cbd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-outercore-bootes-chariklo (npm)

The package juno-outercore-bootes-chariklo was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in juno-meissa-electron-builder-janus (npm)

Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juno-magellan-acamar-karma (npm)

Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...