CVE-2025-12637

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in hendra-tumis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2ef98ddb775c02bbcef6955e65d8f6f7b6086b4d9faad4aca60eb1b41081b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-rangi98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84a8f8e6bbf7ff156fb058d659c7998dd3e366bd303c8f596f97fa67005da74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76779 Malicious code in agus-ronde61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0197fbcf6df8230152218bf2929819b018da0409f5ec77b83ac2075f2ac49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82094 Malicious code in vida-jengkol8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79d2f5a9ee0d5d58ec355b2fe58c9852e39d1b34d18d5b3eda3e5bc8daeb226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-tempe15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2004d468fce32be558925096d8b6cfeafcc0a90a021b7d569983ef389911258b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-papeda69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee1564ca1f262805c9cf7ab72d139b76edbd0ded54140b935ab7b353ec2712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7860d55081883404476f398c4b1e4bdcbfeedebc5965be487f89f928a5ad944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-mieayam85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244b0fcec5d450777372daa069d97f9cda093c21ad6a98bc3be218e4ee605b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-naget2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9257839f59a339a376c98a1ecfbcec9bacb51e28398e2cd55f3cba128a5260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-klipo47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb82aebe8a1a372fe7aa3d7f55df7f5cbd5d82917e167e75fd470e2eb283b1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd23ebd8e211b1471c2c3b78ef2409b4cf60b1a0deb391a5fb9dd0148405eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-kue51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f6bd0d0e86dc41c8697814fdf1824d91576c4523e1e644c7582327b7945bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-menjes63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b02069824790ea7fae3ce08cc8f5da6e3dfe408cf9477a376e5883b8365249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-ongol-ongol24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e84e8ffaad8e8a5a2e138e521d114abf4d81249dbb06c1479901fb230333b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-miebogor13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f4aada89f808812fdba16c9a2687790bb9373c45058cd88069d2cefa7e6bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasicampur97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc343fa168592be540320553f77ffa37b5f1f3d775f7883924deeb9688c65f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11029d85ecd2e8630e0d1186f44944db3a986e2d567921bd870250563c3919b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-peyek80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8f179fa6e6f8f42b76902d48debd1d3cbb38b11f562b8f0bc97ca42b7b7ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-pisang21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097147489e9fa1a93404255cc8e72801246f717ee473252caf3f60298cbbc864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...