CVE-2025-60727

creationtimestamp| type| source ---|---|--- 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 17:31:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0359 2025-11-12 08:07:30+00:00| seen|...

CVE-2025-12943

CVE-2025-12943 involves NETGEAR RAX30 and RAXE300 devices, where improper certificate validation in the firmware update logic lets an attacker who can intercept and modify traffic potentially execute arbitrary commands on the device. Affected products: NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400...

Malicious code in slow_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee56ac729d192f8d5b74bff4fa6e7c7510a33a207fa8c14d4fcaefe9319946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112851 Malicious code in bayu-toge80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833bc39c1e912991435f609aec660eef5e130e09462b5f90b714f39e5d916de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad9d9defeef6935b20518bf6e2ef05cd8527734f78e2d17c1fc7be1c29c8abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108622 Malicious code in sheer_stingray_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc61bcd567e345d59f6b80dc5c07a6169f405f9e4a863071a4a9f6ef78855a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101139 Malicious code in cuddly_roadrunner_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d48e45c5d73ef11388a4922089fde6e3eb457b1ddec4e28aabdcd2072966caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99889 Malicious code in bella-donat86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ee719365468a412ee75c94219dc70287cad31ecd572ae28421988156d56bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94581 Malicious code in forthcoming_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d198cc7c592e34e410725aef4df2ff58c3d07769c6c12e61366a4204cc9a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93269 Malicious code in arrogant_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fceab05bb9d4b993d603b74e45af407d25ce25a2849453da4a8178a62b74479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95791 Malicious code in original_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1d3cbaf1d0933863c62459ff8b2d144369b91a1c7d82d65f5e7374c06cb793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86651 Malicious code in indah-kue95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e331f444978dd6c717af6a135a6980b62220ae01807c8807445efcd6f326afad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88077 Malicious code in lutfi-sambel36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00855837dda4b3a9ede9f260aa28a011a1092f28dcc1745539c58c7b5d161a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11999

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarkerresetmap and ammsavemapapi functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upda...

MAL-2025-82430 Malicious code in xaver-kentang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e7f1ac1a765710f2fc40d771e287f6b3c1853e47b11b86baf997358868a777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76240 Malicious code in wibowo-jamblang59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c13d6e585c90e24549df58b490fcf5e30e2267212c581fa7d20ebc1ab7bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-lime-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ff88ebe00d3b5760aef3f55b9e96a7d2b1bafd325e83a41d9255bfe3a2fe98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68861 Malicious code in independent-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Shelf Planner plugin <= 2.7.0 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Shelf Planner versions = 2.7.0...

Malicious code in damaged_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5969346aa18fa96f43ced9a4499893613e2db1ae785053296165e1d84dfdd031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...