CVE-2025-59134

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through = 1.5.8...

EUVD-2025-204144

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through = 1.5.8...

PT-2025-52102

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through = 1.5.8...

WordPress plugin Sale! Immigration law, Visa services support, Migration Agent Consulting 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Sale...

A week in security (December 8 – December 14)

Last week on Malwarebytes Labs: The US digital doxxing of H-1B applicants is a massive privacy misstep Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer How private is your VPN? DroidLock malware locks you out of your Android device and demands ransom Malwarebytes...

The US digital doxxing of H-1B applicants is a massive privacy misstep

Technology professionals hoping to come and work in the US face a new privacy concern. Starting December 15, skilled workers on H-1B visas and their families must flip their social media profiles to public before their consular interviews. It’s a deeply risky move from a security and privacy...

Malicious code in guras-visa-malays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22b0d00ddfa61e09c6793366d9edb7068a5df36a1a5c8596fc368d846a67f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teajawan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83eb0d21d1cc60142d96268aea7128343473266c1c0759e0883f2e6099383200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-ch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd77492c09f059a2c07e504bb3040c371b402b0d9999096613642f7d7a9f7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-malas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845c294e5fc23ea7aac83dbc07e736f0566e17f452927e4617793c962648ee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teajawaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8cd1535e1b219707c74ca073890022336e5fc151c92fc026ad263cfb4b85a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155475 Malicious code in guras-visa-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628c20ddf09edd8170e8f4edbce3d28dbdca521c297d927c96e8dca6e6377225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155474 Malicious code in guras-visa-china (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cc69d4f0910ed7ddd48d8bd98c029dcde9aca5d41aa9fa47e98501597a8e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155498 Malicious code in guras-visa-teaajawapan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839ebae0b4e0a9b2e80eab6415d25552a71cc0c9677e489d8db401c9e42eb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-chin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317004d3fb4abc8d5f9671d92af25b7bf69775df9af923ae3c7fa05e11e7a2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b0b01a91d2e1cc4e2ee9439439e7aa30a55f736b7358f137dd70c966cbf223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-koreaselatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f194b6c51e24ef248a6073d26576997e7f1ef11680c313587d9c2c3425dcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879637fe180895f23e5318ad9a2fe5df23fb7eb3618efd65e9f71833580b945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-jap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528302afc9eee9ca29ef5519e69788fc42dc13c447e30399144b9b37dc53cfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...