Malicious code in yanti-sambel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e9956507a40549a3c75cb5f36fe2db1549da2fd490887f26af0678122ce85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138067 Malicious code in wibowo-semur49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c1c70d0ab103dec26c464d864831e2a52d19b800f5e59764096d77111b54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-49145

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks mostly administrators can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature...

Malicious code in tiara-liwet84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92957d5462d6f81d962712eac83d953f095ac7a406d6d65278c3d194a2241a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e64aa44c81c7aea6959ea516d8a6b0dfecbda4c39451e80cfa2f533c4e1554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d2acd879eb10d3c4f417b4c189fe3aabf073a001c53af8e81e79097facff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-otak-otak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b9b364f9170f6e7ad4c970bddd383737274ea8cc161a29dae496cbbade3644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130823 Malicious code in umi-lumpur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa6bb0dd9ca0739e89f218d77faafc09fb1365c56d0f9219e3818a29a4730bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131285 Malicious code in wealthy_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c9d088f633564c3a0aff86512b83a0c6094fdf64ebf4239a4dc03f0568a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127583 Malicious code in jaja-gado-gado78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d6c6ed4c4a57c6c7a49fd0d17f55c9dfe83881c7496c78bab03baa45c0f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130175 Malicious code in sinta-oblok88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29442b28315411659def6d9824823379881cb491a13e34a185edcb828bb1fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129298 Malicious code in partial_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081938676ae03c13032d2e58102d50a5eef5722315c0ae462b00d0f3df874709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mendoan83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc06dc7dcbf70153af58b1737e90d28c2683da3a1e729ba2c0d10a60817861f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8495fa86ca428af9b981733fc1768535b3a780dbdea22d9f3b3bc4386f6cd4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f402ade6db8415aa72830e27c4bc1dd969d8f688d413fc127da4923cc707f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122062 Malicious code in neat_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5323d27ee90b261249c923f1627c718d684002498e1cb55e9e4883fc9cde667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118861 Malicious code in bambang-tumis16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988e671c549189c8ac7cfbefe55b045249eace97acd92cd558518ab480e8336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9c7258e8640b5d3e7724eb5c5ab3c69df9112993ca40bb26a718c4927f70e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31728f32654f5a06fcffd68f8555dd87cc91adde36e89edfae10f1d8247cb49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6721b82213ee9a5c66a82bd81e90cb8062ae4e25c7aba451a6ae43528c122a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...