MAL-2025-192150 Malicious code in elf-stats-snuggly-rocket-941 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec7ceb7fb43388fe1fdad9e30686d5023d591e8c7d041d9c05d299158cbae29 The package elf-stats-snuggly-rocket-941 was found to contain malicious code...

Malicious code in elf-stats-starlit-rocket-905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110395204e0a3b92c7b46c2124cbb757f448c174b2f0f49cf6641d9a58305af The package elf-stats-starlit-rocket-905 was found to contain malicious code...

MAL-2025-192192 Malicious code in elf-stats-whimsical-rocket-922 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eafc996374822027e06cb6d0f8686a40e1540311eab4553fbca982ddf808c5f The package elf-stats-whimsical-rocket-922 was found to contain malicious code...

WordPress Zigaform plugin <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint vulnerability

Unauthenticated Form Submission Data Disclosure in rocketfrontpaymentseesummary AJAX Endpoint vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Zigaform – Price Calculator & Cost Estimation Form Builder Lite versions = 7.6.5...

EUVD-2025-178418

Malicious code in inflation-apollo-rocket-higgs npm...

EUVD-2025-176616

Malicious code in rocket-got-heka-json npm...

EUVD-2025-179870

Malicious code in cassini-hawkingradiation-rocket-sedna npm...

EUVD-2025-176615

Malicious code in rocket-graviton-aurora-blueshift npm...

EUVD-2025-180330

Malicious code in ariel-blitz-rocket-concurrently npm...

Malicious code in rocket-polaris-prettier-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178661

Malicious code in greatfilter-lithosphere-isostasy-rocket npm...

EUVD-2025-177356

Malicious code in paleomagnetism-levels-rocket-dependencies npm...

Malicious code in google-radiant-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c66e0686c4618a725de20e95e6ce1715c68327b6ccc280c359a1139312e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176619

Malicious code in rocket-dynamo-supervisor-winston npm...

MAL-2025-189256 Malicious code in rocket-dynamo-supervisor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189052 Malicious code in quito-rocket-radiant-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1027d85e5f5fe77252e470808dec33a66a0131fb5706d9c2bdc7aef3e9a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185467 Malicious code in antares-jasmine-rocket-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aee983d1436336ccf9ed5669ffc4797960cd6c4e50b1ef18c630a481685241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185558 Malicious code in ariel-blitz-rocket-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177361

Malicious code in paleoecology-tardigrade-express-rocket npm...

MAL-2025-189071 Malicious code in radiometric-nova-rocket-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca38aecb47598dcff305898e0ce7687de1ab15863e927bbeba1da96300fc7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...