565 matches found
Malicious code in aibola-milomipe-aumai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044fa68c181b2f01dd77946ce457dc8af41e04f0900bf948ea81687cc53eb499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuramagi-sutaf-dafida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8f19dd6787e4d25c4198e1788bbf484c73cbee57fab8b8023ef434e153c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kinetic-impulse-polaris-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147563 Malicious code in sadr-jest-await-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142784 Malicious code in galaxy-andromeda-non-blocking-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678b2e974017bcf36f02c2fed64b410c56a92866b5d5c133e7e13bf7dab166d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zaki-lumpur33-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ff38c554489e0012def96f1b1e25bf1bc2a60a67ab40e64fbf991126dd505a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-125936 Malicious code in dono-lepet34-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8d14bf3e559a798f1fd2ce956a77dfe9b023ffae46344af3554157310b356f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-119761 Malicious code in erick-jengkol76-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2def1d372e60ef95ad2f9befbb02791bde3ce37cbe988a54b07abd7cc0fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nana-sroto9-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40540e8cc56b8b1a2a49715b76c42432b1c7d2c10245f94b7acca9b319c1db6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106098 Malicious code in nadia-lontong6-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6acfadd6febda78a2874462caa5e281f2e066a374b23615d3ba68e40ff85860b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fadhil-gembus30-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b68f989f2bf6f4838995c6ef4864d5611ac38b6aac391ce338c675cdc1999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89942 Malicious code in resonant_crayfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64782c9901b5265ea15baee26dc8129ac59eed7585104bcdd30e59946d2a6b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-79365 Malicious code in kiki-tahu15-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc10c0487385584b45f19f18b995656c3d77d3ac608835abdb5de5dd9c75f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in okta-gudeg7-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124091c746d3264e24f8086954bfa2bda32102ef010a70cf0dc9557946f6826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-7526
CVE-2025-7526 affects WP Travel Engine – Tour Booking Plugin – Tour Operator Software for WordPress (versions
CVE-2025-7526 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion via renaming due to insufficient file path validation in the setuserprofileimage function in all versions up to, and including, 6.6.7. This makes it possible for...
EUVD-2018-11178
Malware in sbrugna...
EUVD-2005-1759
Malware in sbrugna...