577 matches found
MAL-2025-119761 Malicious code in erick-jengkol76-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2def1d372e60ef95ad2f9befbb02791bde3ce37cbe988a54b07abd7cc0fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nana-sroto9-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40540e8cc56b8b1a2a49715b76c42432b1c7d2c10245f94b7acca9b319c1db6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106098 Malicious code in nadia-lontong6-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6acfadd6febda78a2874462caa5e281f2e066a374b23615d3ba68e40ff85860b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89942 Malicious code in resonant_crayfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64782c9901b5265ea15baee26dc8129ac59eed7585104bcdd30e59946d2a6b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fadhil-gembus30-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b68f989f2bf6f4838995c6ef4864d5611ac38b6aac391ce338c675cdc1999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-79365 Malicious code in kiki-tahu15-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc10c0487385584b45f19f18b995656c3d77d3ac608835abdb5de5dd9c75f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in okta-gudeg7-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124091c746d3264e24f8086954bfa2bda32102ef010a70cf0dc9557946f6826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-7526 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion via renaming due to insufficient file path validation in the setuserprofileimage function in all versions up to, and including, 6.6.7. This makes it possible for...
CVE-2025-7526
CVE-2025-7526 affects WP Travel Engine – Tour Booking Plugin – Tour Operator Software for WordPress (versions
EUVD-2020-12602
Malware in sbrugna...
EUVD-2005-2771
Malware in sbrugna...
EUVD-2018-10761
Malware in sbrugna...
EUVD-2018-20734
Malware in sbrugna...
EUVD-2019-2929
Malware in sbrugna...
EUVD-2005-1759
Malware in sbrugna...
EUVD-2006-0135
Malware in sbrugna...
EUVD-2021-23932
Malware in sbrugna...
EUVD-2010-2802
Malware in sbrugna...