WordPress Elastic Theme Editor plugin <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by kr0d in WordPress Plugin Elastic Theme Editor versions = 0.0.3...

Malicious code in mere_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66618d23536f6882cb7a552ff1bc7ddb4a2f1636a54c4b2b2e7a0c2ffc3fe5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f21dac03da1d40a5935d9423e84410ca746ec122d7599bb1710e499ae1ff18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8e7f76cc1158b1f46a477d25bc069b57ba19991a4a3ec5c06042ebad332ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d969975f13e09c5d0a88a8512a88ca6fb9c08eb4cef434cd6c017b7805eb4eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab6c7a7d23a153dd78fe7c9c8fd1333df4496c0ffc46b91348f660b82acd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223511963dedc6872fefd68dda4a74f99e6c836ef4bd5a3d61f0f9e8248ae55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b773cab45ad0412cd9bdbc3ef7492697d375830d874ed6c69505be3153393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a659793d3e34a86e15ad92dd9cd3a79c9eff05f810f5ca6535b8f4036909fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0149ec636082f792ff45f1e23c930ede1f63216d30058cdeb8177e37f53d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61275 Malicious code in shiny_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e9e076603b4edbb1aea31b5bcce2f638965976ff5b570566d898861e2323ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61480 Malicious code in top_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab6c7a7d23a153dd78fe7c9c8fd1333df4496c0ffc46b91348f660b82acd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61493 Malicious code in traditional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a079749619fd72f83d44fe744d30a630485b6889d567a05e699a265bcdba09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27d274d296458a7ac08d23a09d4a3eea3d43f57544f3196fb41fd83fffb8d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b80251c443ea1755ef86a606db7522011dbbd59ef7de40a040752911c77e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivid_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6525f9b24a56a95b73b3106dcecfe651b79ecc02d61682bd20ba0d012025f240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60103 Malicious code in classical_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eae44dcd49b5f32fd17cb0cfe0be4a9d266fe6ef38ca955bb69653d3ab3de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a6a2a1be6b1fa9a28b85c420d6d60bb47e81ef409366e8dfa3dac1bfb9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44de98d83c9458d13ed7b7699131407e0dd52eb05aaf26eb091d7a4ecd38aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208abc7fc46e160809791619d67537098d88dbbef1f9e6a2d184c2f33fffc36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...