EUVD-2025-51477

Malicious code in traditional-lime-rabbit npm...

EUVD-2025-52455

Malicious code in raspy-lavender-rabbit npm...

Malicious code in silky-copper-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27015684ec0055830e5e9373229673a4f2ce6212eae6cf82164b3cdfd5d3304e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55486

Malicious code in chemical-aquamarine-rabbit npm...

EUVD-2025-55477

Malicious code in chilly-pink-rabbit npm...

EUVD-2025-54912

Malicious code in desperate-red-rabbit npm...

EUVD-2025-53909

Malicious code in hungry-teal-rabbit npm...

Malicious code in hungry-teal-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b97e8a3127ce33d1d37a1c5f670c99bf2eb271f4010db8596ac2c46d23888df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67214 Malicious code in clean-beige-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bb34f09cc917a19339fb2fb5bc5c75769b4b286ae12e2f4e65abe4fe0d82c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55882

Malicious code in amused-amaranth-rabbit npm...

MAL-2025-70194 Malicious code in raspy-lavender-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cac18fddcce9fa70bb5ea1dffc91596e44c929ed3bc46b0abfc637deb5f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45629

Malicious code in rattyrabbitz3n npm...

EUVD-2025-45202

Malicious code in spottyrabbitz3n npm...

MAL-2025-56384 Malicious code in forthcoming_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71bbaea5558410c10b3e0951c2388b2dd16447531c19f7566793d03942aa2558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58773 Malicious code in spotty_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7538a76bada357635a0add5d5472b83e8615da4761b977b9a121219fcf80bac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-60226

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through = 1.5.2...

EUVD-2025-35403

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through = 1.5.2...

CVE-2025-60226

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through = 1.5.2...

CVE-2025-60226

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through = 1.5.2...

CVE-2025-60226

CVE-2025-60226 describes a deserialization of untrusted data vulnerability in the WordPress WordPress White Rabbit theme (up to version 1.5.2). The underlying issue is PHP Object Injection via deserializing untrusted data, as indicated by multiple connected sources. Affected software/component: W...