MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b75bc45862c71f9c1c20c777cdd7352f73417dc0f8770e370f838e584e9099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-sambel22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b5909adce3e73d753d69a523d8a9620853fa4fb085d4aaf2f7c55d8934af3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lodeh57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c68db18f9d39b607b7f511ab27e1bc433632e4bf9c8bafce848b44b3da886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66618d23536f6882cb7a552ff1bc7ddb4a2f1636a54c4b2b2e7a0c2ffc3fe5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a6a2a1be6b1fa9a28b85c420d6d60bb47e81ef409366e8dfa3dac1bfb9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55481 Malicious code in candra-bubur18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd128ba8c7612ab77324d64f1e518bed7486c6e9d97571dd3505000df0c43eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57772 Malicious code in nana-rangi86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6eecb9434fee9df7af54290fec479b4153e097f5c2a85582d132a84fd05cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59472 Malicious code in weak_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0771c5c47957222463a6fba33e53195c045e765f577fefb68382f58c0f0d4e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59246 Malicious code in vera-lumpur99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a0c5868bb208558b77e5ea1d63557ddede2e25b0715989b8169a316855df4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-semur100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ab12d31ce92cfc6bbc01338ccdac27095babd37a4cdcb3cb297a38d4eb181e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kupat77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d32154fdba59c608fb6c9e77ee7adcce90a8a95c44f0cdcf20752a1deef00e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kue50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bab129b909b2525fd455fbf44321acb5033c89a66cc30d5656fd8580fdf8574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-pisang66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40580f5aefa07782dab0dbb26f679141abba96d576f5e0ece0a5aa2080468d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362e8f1adac20fc880b2a8d1c03fa177a5125ac37eebc2f7a65ebf638abb5275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52891 Malicious code in hanafi-tiwul78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b244749d7ae618b401e98e506607a0befceaddf598683f83e6760ca4ed4db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50102 Malicious code in cindy-oblok61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a30577372aa7c829c477b60b3d8adaa95099b95219b0641064398377c422d1b The package cindy-oblok61-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-11881

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myapppverify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2025-11881 AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myapppverify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2025-11881 AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myapppverify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data...