Malicious code in kupaio-kia-jakafafswafofoai (npm)

Source: amazon-inspector ce552ae069979d367c5c9d7c3a1548aba51f36a80cdb3873b15a348efb97786e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaaopoai (npm)

Source: amazon-inspector 9cb32c2ee2a0511029a6da620c987ff58dc5f45dee0d16a04d22434f5c44b37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakasfoai (npm)

Source: amazon-inspector 69d9cd01dcc2c58c08058f9c87c20aa60512e346c42728227fe6d646e3cc5dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakafoai (npm)

Source: amazon-inspector 35429d66d6f074c6690c06badddcf3c429cff0df213b75e32966755c1311f055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaopoai (npm)

Source: amazon-inspector d88c37dab832e53b38b27d051b082aefa8e883fe7eb47536c63258e7a66b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaiaolapoai (npm)

Source: amazon-inspector 7f4b91ac968fa8094976f0987eec1f55601fba7e36b4c74fd7263909ebf85864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakafasfoai (npm)

Source: amazon-inspector 8c2671a10c0c9d1f8d03c24ebe1d23692b89cf4a75ad1fd1e839aaf8607e4977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakafafswaofoai (npm)

Source: amazon-inspector 10e1553bd85c6b9569cdc3ff6bf8c2ee3bf9cbd8c77a16ca84f9fe7fa39e46d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaiaopoai (npm)

Source: amazon-inspector cbd9a37ee99ecbad68d15277bf9efb8b7622a9f36c467224c419b0607de9b227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakafafsfoai (npm)

Source: amazon-inspector 6f20a6eac0dbcad01c7397af568f281cae2c744e3529015d1a5d9c51dc859d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakafafswofoai (npm)

Source: amazon-inspector 4424a42a4151ea331642a717b884fb458ea44a2e10664241f3348c9d90d2b44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaooai (npm)

Source: amazon-inspector 679687cf56b2b1bf4ada0e3a8606b951fd4b6ce25dbc79afd47661ed44e38c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kupaio-kia-jakaoai (npm)

Source: amazon-inspector 556183d340bc260eb89c2540197dbda9dfbd40f6b7e5b79cf8761de33c6aa9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ksai-kia-a (npm)

Source: amazon-inspector 9758c1238c38f9e3536dbf296fe668f879c2d2551c566585ffec797486c6bb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Digital Twin-Based Intrusion Detection for Vehicle Powertrain CAN Bus Systems

Existing automotive intrusion detection systems IDSs for the Controller Area Network CAN largely target discrepancies in message timing, frequency, or sequencing and cannot detect attacks that preserve these properties while manipulating the payload. Digital twins DTs have been used to emulate CA...

CVE-2026-7509

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-7509 KIA Subtitle <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-7509

The CVE-2026-7509 affects the WordPress KIA Subtitle plugin (

CVE-2026-7509 KIA Subtitle <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

EUVD-2026-31406

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...