EUVD-2025-80281

Malicious code in tinyanteater0xrequest npm...

MAL-2025-109702 Malicious code in tiny_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8daddec6b4a44a34a0444a51a3fa1beccb8587fb225fb409e78f69026fcf3ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80279

Malicious code in tinygrasshopper0xrequest npm...

EUVD-2025-83994

Malicious code in tinyparakeetz3n npm...

EUVD-2025-73271

Malicious code in tinyblackbirdz3n npm...

EUVD-2025-66136

Malicious code in tinyguineafowlz3n npm...

MAL-2025-91118 Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557bbe3584b000837b00088f0ce9571c9a3476bac6aaa4b45d27dedc0937478b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81683 Malicious code in tiny_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661434c5010c4318d5896469ccb6796598522b2611c3f6c282397d1beaaf015a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51507

Malicious code in tiny-amaranth-pigeon npm...

EUVD-2025-51503

Malicious code in tiny-tan-falcon npm...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-red-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b027fd39b632cb7864ad150e7b65562e7fdcb3dfd5877181cef17890a90c367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51505

Malicious code in tiny-red-chimpanzee npm...

EUVD-2025-51504

Malicious code in tiny-sapphire-canid npm...

EUVD-2025-51506

Malicious code in tiny-aquamarine-hornet npm...

Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57025

Malicious code in tinycockroachz3n npm...

CVE-2025-58186

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption...

CVE-2025-11502

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswptinymultiplefaq' shortcode in all versions up to, and including, 1.51 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...