MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141521 Malicious code in delphinus-jwt-vega-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56a0489e227f87a51124ec28f0433242c31269ba85105ff53e90fe143e98125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111979

Malicious code in kastra-style-loader-scorpius-mui npm...

StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak

Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...

Malicious code in rina-peyek96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa40866ce59a1c450ae4cd293804269fe7598cdc9eb4742969cc46e3efc68ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199d3300f5957611c774a013976d215b13e48a506f878ec6402f146ff57a4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-miebogor53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbbb051f424f4dcff4c4bf77cdce46b3f2de93562cc6a0551cd4a0be09c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-jus80-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69c975b1f8f1cec28bd0f790997b54f4d7b3a3e8d9ba91ecca190fdb0ad2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-menjes36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170dc74cb83f33d2026f32b5aadf89d534c9aec6d906acead42f6f4337334534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84910 Malicious code in eka-rawon95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e6a178087007fab0134ac85abfa47e455fce955b62b076ce8e117228cbae5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68308 Malicious code in feminist-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac13ed9adccc10d3dc9a5581cd5adb71380525342b0cb47f351a22997ef8d335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501057b254c277a0d05cc3a19fcdf2ddcb3132fb54134272e38814159ff0f2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51342 Malicious code in cindy-jengkol40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e188e390d19f2f4b8ffd5a0c2e00740784d3772e64a748b7c1612560934184d The package cindy-jengkol40-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-191930 Malicious code in wei516-ppa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d5a85017b397970606b9d2d5150a6f6ee8f71fdbd810fe6b0a8f34c577d76d1 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...

Malicious code in wayspiritmcp-tpa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 523cbbda7a0fda2addfcd432b1bfcc1df072ee67a593ffce535b7da7005caae8 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...

CVE-2025-11812

The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reusebuildersingleposttitle' shortcode in all versions up to, and including, 1.7. This is due to insufficient input sanitization and output escaping on the 'style' attribute. This makes it possible for...

WordPress plugin Reuse Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-44940

The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reuse builder single post title' shortcode in all versions up to, and including, 1.7. This is due to insufficient input sanitization and output escaping on the 'style' attribute. This makes it possible fo...

EUVD-2025-37424

The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3. This is due to the plugin storing arbitrary CSS styles submitted via the qi-blocks/v1/update-styles REST API endpoint without proper sanitization in the updateglobalstylescallbac...

EUVD-2025-37393

Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service DoS condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s...