EUVD-2025-150405

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. The permission check in the...

CVE-2025-11923

CVE-2025-11923 (LifterLMS) — Summary for the WordPress plugin vulnerability Affected product: LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes (WordPress plugin). Root cause: Privilege escalation due to insufficient identity validation before allowing role modification via the REST API...

EUVD-2025-176665

Malicious code in rest-auriga-bellatrix-wezen npm...

EUVD-2025-175758

Malicious code in ursa-rest-fetch-thermochronology npm...

EUVD-2025-176662

Malicious code in rest-nova-nightwatch-commitlint-config-angular npm...

EUVD-2025-176088

Malicious code in sync-uglify-js-rest-superagent npm...

EUVD-2025-178101

Malicious code in library-nebula-rest-local npm...

EUVD-2025-179421

Malicious code in dactyl-phoenix-rest-gulp npm...

EUVD-2025-175764

Malicious code in ursa-mui-rest-xerxes npm...

EUVD-2025-178746

Malicious code in gemini-fornax-commitlint-rest npm...

EUVD-2025-178233

Malicious code in jwt-rest-jest-pm2 npm...

EUVD-2025-176659

Malicious code in rest-rocket-lint-staged-triton npm...

Malicious code in library-nebula-rest-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ba74e4d265a0cd7cf0b173712f28c7ddd0af4de4fa9cd301c0208b5d3e55be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176658

Malicious code in rest-version-library-hadron npm...

EUVD-2025-179005

Malicious code in event-miranda-rest-semantic-release npm...

Malicious code in rest-version-library-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b01d06955b1393fdf87ea7bfd085c32e43a39e890b503008aefae093db6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176672

Malicious code in resolvers-solis-native-rest npm...

EUVD-2025-178348

Malicious code in iota-betelgeuse-rest-sass-loader npm...

EUVD-2025-175477

Malicious code in xml-proxima-rest-process npm...

Malicious code in alphard-comet-transport-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c8d92d35be1e1dfe8247bfe1991bc31f583cadc4ac985cb06952c40c4ae695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...