PT-2026-69266

Name of the Vulnerable Software and Affected Versions Create WordPress plugin versions prior to 2.5.4 Description An authorization check is missing before returning content over a REST API route. As a side effect, this route publishes the requested content, which allows unauthenticated attackers ...

Malicious code in faroukcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4da3cc09068e4b883723db22cee6d8db39e2b67006ae0d4eb74bc5feff3e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solarwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017cd56f0a51b9c7182f2e8c06dd848816dabf2ee1e5e106fce4ba1e85572866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-dependencies-cypress-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6846e48be60049a0022c05fa228ee8589448d3f4ad839b373af2052e9e53d066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...