MAL-2025-95500 Malicious code in miserable_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae76bba9825f5e1686db04344734c9f536aac5aa97882ce0022faba30a166ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94087 Malicious code in dizzy_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9538e2c2471f4e3c60479f8642d203cbaafecd391941d96b3a3801cf7bcd6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95981 Malicious code in pregnant_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519c748f8422957438e94372bc1dd4676a06679fe1f991906fbd960f0d197bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2269c515f01072d9d5a3f3abaafc4c307f14f997381682aac73cec7683ffdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f86284871c09b3363c9168d34a44ff3eb290972b38a8fa3b01cb8862b3265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a37083ff25b5923b13a79c6727f78d8b16b5f8b5ec7f6506caa67206726c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a9ea09378b252778c1b45f16d64342a064b81a760754563165f2100ab8a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95749 Malicious code in olympic_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00091ec844379e24e78ecab632fb75d8c85dfdad04dc32ae65916bbcc0d839af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94706 Malicious code in glorious_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594b07bf004c5c6c6932debfe62658f45528555d35e15ebe8f52413cff21c08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93961 Malicious code in delicate_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf0897d5d820323097ea6fc7625e70c333b5cea28b1d693a1733952848d3d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bad46c2c216872dfe3ee7ef76f507d03641faf901cafad5bb6efcbca7dd9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d875524a660df55225669b59dbd5dba4833638c96436a9cd9cb2d92af45d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93076 Malicious code in absolute_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de454ddeb5f544abb404f5f0300d61d5f1eb156c7af8a3abb0b0a0b37680f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96148 Malicious code in querulous_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e1d26548dbe93655f6db3d8ca699740c5c622d43f58ed71aa72618c932ba5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c82fcdf6f59600a93af1c66d9656dc4bd302e689a0bc0028c49d78e2beb1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd1a6334392affe3da552019d40cce69c508983fa094a21ea1abe9a54c0d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1943a354bc885cefe09e2f8b0c151a40226a77cbe987ff535ac298977bb4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67af8c9107c8fe606df7b4167bb5af57a68e9aed145e5ded8b6cee918eccdfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12931

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

Malicious code in indah-lutis35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b00fc4a746612210768ef959ac1878d9c85fd6bf82b83fe942a02f541e389d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...