MAL-2025-50911 Malicious code in bambang-otak-otak8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc06cb209149c91a78ee89ee29b9c62dd5bc532eb1d0bc9658bf5dca6390a9e6 The package bambang-otak-otak8-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51699 Malicious code in eko-tempe58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e68c8afede7239aebf486de68ae5d51dc7c3e61f466768cd3da7e12b69ee6b0 The package eko-tempe58-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50542 Malicious code in tomi-lengko48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf3b10e76aae5e184d7e4d3f28a3d8f308f4c38a76de7fd012e99c11b2ec62a The package tomi-lengko48-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50921 Malicious code in bambang-sambel11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ad246a5e17e7c516fac1f6770a1548c567ea45cd9e288eb4e6ccca5937527b The package bambang-sambel11-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51165 Malicious code in budi-tapai70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4217baf151ce118d86f2db6c93670afdfc58ee7cb49866d4d43352a8ef874484 The package budi-tapai70-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-52499 Malicious code in tuti-ongol-ongol46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ddb5fe2a927aaa548d3bb5cabeba5b918bc06de2901e2482313c1b79ca5953 The package tuti-ongol-ongol46-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52733 Malicious code in wibowo-ronde7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06602ab9e5c697df17599a5f147271a073ef5406ebbcfa312ff946dcf2179643 The package wibowo-ronde7-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51734 Malicious code in erick-tahu85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d3cca47b247ece35e2676a8e6a0fd265832847e0cf4e912822ed46780e61c2 The package erick-tahu85-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51202 Malicious code in candra-kupat87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24d04a3e752cb692c35e1c2e3eb67bb7abb2350a502ca56a607d3d62486ca95 The package candra-kupat87-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50601 Malicious code in umi-rujaksoto58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc1583a7837192a6924ef9eca59cf6e9935f9435e195672be84ce7239c298e1 The package umi-rujaksoto58-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50737 Malicious code in ade-buburayam4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a59d6ba536e6407f180381c7a66ef891c837131baa41a97c985d5279f9d8f3 The package ade-buburayam4-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51204 Malicious code in candra-lapis73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c96241c88ab8e306c4c72e2513c71ae02c0013287e9869dc22f3c12d1a41af The package candra-lapis73-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50332 Malicious code in erick-tahu56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeae30857d3446698d62d2e0e5c2d2948bacf2d3e88701928083154dbdf16ca1 The package erick-tahu56-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51824 Malicious code in fajar-keripik26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fde31d7fe4a2bc7306c32f5d3ea71497fa1f12d7747ae674d9f81e9f26ed1b4 The package fajar-keripik26-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50039 Malicious code in cici-gaplek45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1147230464709e74e617c329d76b57e83712d9af0f66efe0a16138e8dc962305 The package cici-gaplek45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51469 Malicious code in dewanto-bubursumsum32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eba1191e32843a5a410bb3f639664208bad67314ae24aac013d5f420698641b The package dewanto-bubursumsum32-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign tha...

MAL-2025-50291 Malicious code in eko-asinan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90baf9d532b55efc5c8c3071ca145bddea0bb3d2c84e93c1c3d8f63c66888c8d The package eko-asinan71-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

WordPress Plugin YouSayToo auto-publishing 1.0 - submit Cross-Site Scripting

WordPress Plugin YouSayToo auto-publishing 1.0 - submit Cross-Site Scripting source: https://www.securityfocus.com/bid/51649/info YouSayToo auto-publishing for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Plugin YouSayToo auto-publishing 1.0 - 'submit' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51649/info YouSayToo auto-publishing for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress YouSayToo Auto-Publishing Plugin 1.0 - Cross Site Scripting

WordPress YouSayToo Auto-Publishing plugin's "submit" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacke...