21007 matches found
MAL-2025-106760 Malicious code in optimistic_turtle-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308caa8444d2c1b1e847c7bd440c224e1e1b9b3f632b0dc38a8abdb941d7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105085 Malicious code in lentengstasiun-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-108869 Malicious code in smiling_spoonbill-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-101346 Malicious code in dependent_bug-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a43b140420c9a75e646aab87ce4f14da7007c3e6ce72c53a55e767e35efdf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105080 Malicious code in lentengpasar-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105077 Malicious code in lentengflyover-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-101838 Malicious code in dynamic_slug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da276baf68a17cf6443fd7d88c3eebb2ea15b52a8954506f1ff8d47790a28e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in common_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68464edd5bc1b5046026df2823e1c8b7ada41c24155ad548c731a992228a4e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-70219
Malicious code in gita-gudeg69-ruro npm...
MAL-2025-110420 Malicious code in vera-soto75-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47af81195908a6f6f062d504c1ceea8d678fa255a5027e71a6b6e01366d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in patria-esdoger89-rudi0x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb96b8281414703f65ae5eca98883596a6b4f786dc8f326f4015e424bd8a2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vida-kolak33-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ca1c17546ff65cf2fb1997660531fc6b8d49e4f133b4781181b0149f47cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gleaming_crow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505f911c5c2b2567a211ac4622b2b5ef94396b4b0132607297b5e59886e821e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in religious_vicuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678af0773777c7de09b763d1fca098c7c50881431a1b4ca8d87d249b49a7662c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-94197 Malicious code in elderly_fish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3930a467356e1d252bd1a3dbda398c7f4b4d43e671c73989352cc365761ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-97321 Malicious code in wasteful_pike_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-82603 Malicious code in youngest_tick_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704cc6a439f941a09e86050281ebbcc2eea49631e23051c0a4f842132d476b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11986 Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State
The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...
