EUVD-2025-120855

Malicious code in ursa-schema-norma-subscription npm...

EUVD-2025-115449

Malicious code in chalk-subscription-mutation-less-loader npm...

EUVD-2025-112481

Malicious code in init-subscription-callisto-europa npm...

EUVD-2025-121568

Malicious code in subscription-ganymede-update-loglevel npm...

Malicious code in chalk-subscription-mutation-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6069b47a6b2862e67c0f0f0744fb681095e2822c4e2f137380f566fd627e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121572

Malicious code in subscription-delphinus-grunt-nightwatch npm...

EUVD-2025-121574

Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx npm...

MAL-2025-143632 Malicious code in init-subscription-callisto-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394c2bac5a142593132709358a31dad622842e119d03316c93ad3dbbabad6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141529 Malicious code in delphinus-subscription-mongodb-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac142598e41e269f280ed6117a0efa39ee9665215459c5818a45e39613e47f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114749

Malicious code in csv-test-subscription-nebula npm...

EUVD-2025-122557

Malicious code in rest-sagitta-subscription-ophiuchus npm...

EUVD-2025-121566

Malicious code in subscription-kinetic-eleventy-cluster npm...

EUVD-2025-123911

Malicious code in pavo-subscription-hyperion-impulse npm...

CVE-2025-12901

The CVE-2025-12901 entry concerns the WordPress plugin Asgaros Forum. Reports across multiple sources confirm a Cross-Site Request Forgery (CSRF) vulnerability in all versions up to 3.2.1 caused by missing nonce validation in the set_subscription_level() function, enabling unauthenticated attacke...

CVE-2025-12901 Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...

CVE-2025-12901 Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...

CVE-2025-12901 Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...

WordPress plugin Easy Email Subscription 跨站脚本漏洞

The WordPress Easy Email Subscription plugin is a plugin for adding email subscription functionality to your WordPress website, allowing users to receive new content updates via email. WordPress Easy Email Subscription plugin suffers from a cross-site scripting vulnerability that stems from the...

WordPress plugin Asgaros Forum 跨站请求伪造漏洞

WordPress Asgaros Forum plugin is a lightweight forum plugin designed for WordPress that supports the rapid creation and management of forum pages, providing basic posting, replying, user management and other functions. The WordPress Asgaros Forum plugin suffers from a cross-site request forgery...