196 matches found
CVE-2026-15946: Missing Authorization
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
PT-2026-95781
Name of the Vulnerable Software and Affected Versions Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization versions prior to 2.6.24 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform...
CVE-2025-14386: Missing Authorization
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the 'generatessourl' and 'validatessotoken' functions in versions 2.4.4 to 2.5.12. This makes it...
MAL-2025-136262 Malicious code in premier_parrotfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5699a0583e37e240735827b673b633ba6808bcf569fcf7a438839c1e6c21e00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89454
Malicious code in premierlizardz3n npm...
Malicious code in premier_lizard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4dd2e33050b22c3964426ecb78185af349c4a337c2cb8dbae586ca63f7caf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78577
Malicious code in premiermuskoxz3n npm...
EUVD-2025-78578
Malicious code in premierlynxz3n npm...
Malicious code in premier_squid_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056f1d84d66aad34f95a8eb99730671f9f275532b8077bc46ffc190e0229700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80907
Malicious code in premiercephalopoddumbs npm...
EUVD-2025-62569
Malicious code in premierguppyz3n npm...
Malicious code in premier_guppy_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0106022c86572ac8183368a4f77391fb17539a3cb8dd11018c06a8aeb0ac745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89500 Malicious code in premier_scorpion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83df24e5f4d743279de53ad5a5d910d68bb568f5c93e8ad8a948e163083e36ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-67752
Malicious code in premierstoatz3n npm...
Malicious code in premier-plum-grouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d828f74d07a4f20b9b2262f08d9965da316f9f28517a8ca29fb290bf916a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52667
Malicious code in premier-plum-grouse npm...
EUVD-2025-45803
Malicious code in premierblackbirdz3n npm...
The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns
Trend™ Research examines the complex collaborative relationship between China-aligned APT groups via the new “Premier Pass-as-a-Service” model, exemplified by the recent activities of Earth Estries and Earth Naga...