Malicious code in common_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68464edd5bc1b5046026df2823e1c8b7ada41c24155ad548c731a992228a4e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70219

Malicious code in gita-gudeg69-ruro npm...

MAL-2025-110420 Malicious code in vera-soto75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47af81195908a6f6f062d504c1ceea8d678fa255a5027e71a6b6e01366d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-esdoger89-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb96b8281414703f65ae5eca98883596a6b4f786dc8f326f4015e424bd8a2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kolak33-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ca1c17546ff65cf2fb1997660531fc6b8d49e4f133b4781181b0149f47cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505f911c5c2b2567a211ac4622b2b5ef94396b4b0132607297b5e59886e821e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678af0773777c7de09b763d1fca098c7c50881431a1b4ca8d87d249b49a7662c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94197 Malicious code in elderly_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3930a467356e1d252bd1a3dbda398c7f4b4d43e671c73989352cc365761ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97321 Malicious code in wasteful_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82603 Malicious code in youngest_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704cc6a439f941a09e86050281ebbcc2eea49631e23051c0a4f842132d476b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11986

CVE-2025-11986 affects the WordPress Crypto Tool plugin (

CVE-2025-11986 Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...

CVE-2025-11988 Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion

The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the cryptodeletejson method with only a...

CVE-2025-11988

The CVE-2025-11988 entry concerns the WordPress Crypto Tool plugin (versions

Malicious code in bayu-taiwan57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5990eb43fd0a5159cda2c2f7ebf5d148c6eee599e3b1a690df6bb47865bea537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Intel OFU 安全漏洞

Intel OFU is a flash update application from Intel Corporation USA. A security vulnerability exists in Intel OFU versions prior to 14.1.31, which stems from improperly set default permissions and could result in elevated privileges...

RHEL 10 : podman (RHSA-2025:20983)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20983 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Bitdefender Endpoint Security Tool 安全漏洞

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A security vulnerability exists in versions prior to Bitdefender Endpoint Security Tool 7.20.52.200087, which stems from improperly restricting folder access and could allow a...

ROS-20251111-10

Vulnerability of processsymtab function of eu-readelf component of ELF Elfutils binary modification and analysis utility is related to copying buffer without checking input data size. ELF Elfutils is related to buffer copying without checking input data size. Exploitation vulnerability could allo...

WordPress Crypto Tool plugin <= 2.22 - Unauthenticated Information Exposure via Global Authentication State vulnerability

Unauthenticated Information Exposure via Global Authentication State vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Crypto versions = 2.22...