522 matches found
GitGuardian Closes 2025 with Strong Enterprise Momentum, Protecting Millions of Developers Worldwide
New York, NY, 14th January 2026, CyberNewsWire...
CVE-2025-23645
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs find-content-ids allows Reflected XSS.This issue affects Find Content IDs: from n/a through = 1.0...
How to Protect Your iPhone or Android Device From Spyware
Being targeted by sophisticated spyware is relatively rare, but experts say that everyone needs to stay vigilant as this dangerous malware continues to proliferate worldwide...
In 2025, age checks started locking people out of the internet
If 2024 was the year lawmakers talked about online age verification, 2025 was the year they actually flipped the switch. In 2025, across parts of Europe and the US, age checks for certain websites especially pornography turned long‑running child‑protection debates into real‑world access controls...
WordPress Small Package Quotes - Worldwide Express Edition plugin <= 5.2.18 - Unauthenticated SQL Injection vulnerability
WordPress Small Package Quotes - Worldwide Express Edition plugin = 5.2.18 - Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – Worldwide Express Edition versions = 5.2.18...
Shai Hulud 2.0, now with a wiper flavor
In September, a new breed of malware distributed via compromised Node Package Manager npm packages made headlines. It was dubbed "Shai-Hulud", and we published an in-depth analysis of it in another post. Recently, a new version was discovered. Shai Hulud 2.0 is a type of two-stage worm-like malwa...
EUVD-2025-116986
Malicious code in worldwide-ivory-harrier npm...
EUVD-2025-116985
Malicious code in worldwide-violet-impala npm...
MAL-2025-139117 Malicious code in worldwide-violet-impala (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50135ad83a162ed7b6ea016caf95136fdc6300729a22c7cc0c2469eb80bbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74076
Malicious code in worldwideslothorange-96 npm...
Malicious code in worldwide_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5547c868e28d3480af47c0b7a7607763779ae9636dcd9098ae9ac22fcd333655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in worldwide_impala_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41596a634de89d1c612c64383ec1912d20e3aa97c8419c2e3a6cd2f175cdccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77900
Malicious code in worldwidebuzzardz3n npm...
EUVD-2025-77899
Malicious code in worldwidecaterpillarz3n npm...
MAL-2025-110999 Malicious code in worldwide_crab_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2d3674b81e7d2c0de540b5097d8e37495f2f8409f384d6d7dfe167687ad752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-83423
Malicious code in worldwideslothz3n npm...
EUVD-2025-72879
Malicious code in worldwidehornetz3n npm...
Malicious code in worldwide-copper-flyingfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e074ebfff418cfa8018b3b2c792f5a332417dd9e50086d41abd1eae1f357143e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...