MAL-2025-174248 Malicious code in goditu-tumia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb901216e8d738adf583ec319a0b45aa1898a60f2d2ab4549d438768068e80f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178129 Malicious code in polymer-tresfd-tehd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ba88dccd63c0ba371dd0293089bb02a5fc02ab617834c9330e3e934709a90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178661 Malicious code in sgoodain-sanu-nubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e949fbafc81f1562231db782c75c58441a923ad5301cfe3e92ca15ff1f53274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177339 Malicious code in poglymer-ogih-gagofgasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b419666ec0db9bca3e9f42c14b87cda293c08cad5a23dc8461973fe3d6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173157 Malicious code in buis-manis-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17867cba99af46aed8036c3dc4d39c123c5b67e7a58017e6c9f8c4f06bb509fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173834 Malicious code in digo-kaism-lmir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d637092208142c8751980cc86d33be7ad33b75b16c1f9625391e75df7d2aebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173117 Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178566 Malicious code in sahufarf-satidafa-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0845bba33f72ba75cbb0e312da5ed28d652d6dfb437f9d2439d83c9da2ef582b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175636 Malicious code in ksai-kiloa-aio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0581076b83ecfb9aa1c98da7100111e994f947105665b5ea2c03561f955c1f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-005

Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not. This can lead to legitimate requests...

Malicious code in guide-maia-unannu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dce492a1a43b5a366e15000f0944c4e262482472acbd37a665ecb464dd6ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-matanidaapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4481639edf6b44bc0694eb1551af5aab8ab234954a4a96f4710a466dff19c034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-guld (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b869bcfb1c0f1f4546a805fcc30ff5ffdba389863b62df13371e5f33eadb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-nagigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e059646ef5b25a4593dd730ed24dc283eaf42b849fe748a0d0db8f9a3fe5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-mat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d2c05582af34617d7eac4b75ca5a9e8fc24040b268d9a97280dda651580165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeee1e28d203ad4d8b0c2d5c2f1917bbcf6ca8ca168cad389548efa455156867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-naofpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3309fc5da1daa43e7f9b8fe35ee19a39bf6d05dafd6b756b126d2c0409907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-osaisisac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe8cabf83b8ad599d6ce24365095489d111e11725ba642ba22e52b7056b663c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...