Malicious code in weak_walrus_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adca24425bfdeeb412e46a5c8521ae2eb258c3c97efeb4e8d9b37c43d5e2ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72964

Malicious code in weakclamz3n npm...

EUVD-2025-72961

Malicious code in weakravenz3n npm...

EUVD-2025-72963

Malicious code in weakdragonz3n npm...

EUVD-2025-61883

Malicious code in weakjellyfishz3n npm...

Malicious code in weak_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff9d5c73563447ec7c3f871cfaf87b60fb23f832848406c762ae6c6eb06ad70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2637b92b901477d2501991cfe4774d082cace74aef2d95fa7a363544f77af5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82319 Malicious code in weak_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5e0663da73777752ac0e1787712f81ab14cb7806528a80c45b9721da69794c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389140b799075070fb23dd441166cd7e8a2cc3694285a1c787c4d7c431c9a374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5e0663da73777752ac0e1787712f81ab14cb7806528a80c45b9721da69794c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12866

EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...

CVE-2025-12589 WP-Walla <= 0.5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The WP-Walla plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 0.5.3.5. This is due to missing nonce verification on the settings page and insufficient input sanitization and output escaping. This makes it possibl...

EUVD-2025-51129

Malicious code in weak-green-tahr npm...

EUVD-2025-51128

Malicious code in weak-white-bee npm...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51130

Malicious code in weak-coffee-warbler npm...

EUVD-2025-56513

Malicious code in weakpelicanz3n npm...

PT-2025-47035

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security flaw exists in Edge Project files or Edge Offline Cache files. If an attacker gains read access to these files, they could reverse engineer user passwords—either app-native ...

WordPress plugin Hydra Booking — Appointment Scheduling & Booking Calendar 安全特征问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Hydra...

WordPress plugin WP Custom Admin Login Page Logo 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...