MAL-2025-131348 Malicious code in wibowo-oncom97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede2fdfc9a524ca3ffb1026fbc7baae05bcbf6bbe931a3b3723770d3ab74236b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90426

Malicious code in lina-mangga85-miaww npm...

EUVD-2025-89786

Malicious code in nurul-nasicampur63-miaww npm...

MAL-2025-114276 Malicious code in gita-kentang74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186b7db467757e14f4b1a93dbd1d00358cd67f5e7c7d87da9f798f0b07e2336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90392

Malicious code in lina-wajit77-miaww npm...

MAL-2025-113632 Malicious code in eligible_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83e08b1afc66ab14b01fcfc760a3880c5257d1c4a38355a60544c661a02ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118237 Malicious code in yanti-liwet28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5996d08b2adaf947dff19967e072b8dc03ebd9287ae30885e6313f36ddb2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11205

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2025-84363

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...

CVE-2025-12539 TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...

MAL-2025-105736 Malicious code in mean_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d299adb49899e3abaaea346e6fe1d9ec313f2c264a05ed3611d617d3149a7829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77345

Malicious code in chosenorangutan-excellentdev npm...

MAL-2025-109012 Malicious code in spicy_starfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in filthy_owl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e5ef177bb7f310c7bdbcfbe6749ae209dbecc4392879e1c57820956bfdea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72783

Malicious code in youthfulbobcatz3n npm...

EUVD-2025-63094

Malicious code in midlionz3n npm...

MAL-2025-85108 Malicious code in erick-mangut84-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67d0c76e5c31f8a6b4a6f0f2ebef822e2603d58c0ca0a392c3931c340d6048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85671

Malicious code in hendra-lupis63-miaww npm...

MAL-2025-84839 Malicious code in eka-brengkes56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e22c5eb603070644f1fb580138141f258f7ba9ccd68950abd51845c3912989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78898 Malicious code in ideological_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f5b066ae22fe3b6ea324b6fbf8277de3bdb947162f93469f4fe3ea537e162a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...