Malicious code in user-lambda-decompress-benchmark-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1bdd5516102d254db4d781c94a6b7a174eb937188ea61c00e3590d7c38cbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-earth-yaml-sun-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15776721f4d33fd92c70a850cda8d70bf94bb4542bc677f4b5ea061bfd0d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12377: Missing Authorization

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-leve...

PT-2025-46818

Name of the Vulnerable Software and Affected Versions Envira Photo Gallery versions up to and including 1.12.0 Description The Envira Photo Gallery plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check in several functions. Authenticated...

Siemens SIMATIC S7-1500 Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2013-4235)

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 Use of Incorrectly-Resolved Name or Reference (CVE-2022-27778)

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Malicious code in inda-fodja-gugopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f656f467fae61c47e54da832eb593a4f58ef6bbdc9141ec22cbdf752d08a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181718 Malicious code in astam-ifut-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c08539c656e48f41aa617390ac7d689069f420dfb2ad72415983f5af83cee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0921edaca69d1f0782e2c02410f57cf1ab59683e9cf2d3b7801f320e23b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183731 Malicious code in manu-oifads-st01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead4c459b0cfd179e730419c2163c0f19e700895a6142b5dcea9cd23bd52f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf74211cd544e2a039a5c5ed42be2ad10226c5357d47d6e8093347d686e1624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185108 Malicious code in sonic-kuig-tgacedcuadojxaeav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1dd553d96a41279e5731f6652ea10a2237a2cc9f72ea1b0964df07ceb3b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebed9d999b6c311235403238e8f2dcb25cbfa02fbc74f19b7bc52e0625e5c83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184090 Malicious code in mlokok-lfki-hakumabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b5e0c59660304db96099e5845700675fd950eddd6c7abe7c840e1f3718537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181815 Malicious code in avangs-olims-noliadsdsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb4713b01c79cdde264b26af63a1d04c523827c497b02395299696b6a057509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauagyafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89377f9e4110b9f46dea808a5fdf0a1cff8082ac6fa627ad5a7645b28c23c3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ujoul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83140cfc8315057339d1878c603011f4f2ded2652ceda1393955a7b80dc58f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0927784b04550f7b46d557e1801dedb4768e9daf49d4070550dbb4d966511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...