CVE-2025-64519

TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection vulnerability exists in the moderator control panel modcp.php. Users with moderator permissions can exploit this vulnerability by supplying...

MAL-2025-128793 Malicious code in nadia-sasag21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbda6b40eb6fae5cd0023b51045172ab772e4ab5e950f8ec74df4494ac2f28d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-teh82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0920751f702a87b02fdb1db456a585829246b4dd8d5628594e8391f2d4b1af39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2d860b4da0030bda4bbe3a315e93818c59b7ee0d9679722c2ebfa61090fd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lepet11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d446420959f7e3852f1e0596087296a4331ec5bde06c613d2f349781afde6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mieayam62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174398574b81cd8481cca4e1aed9fd51f6fa861893322333e36c2a97705a8de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119968 Malicious code in fajar-ruwet12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32167dee81a16b798e9886c996952f43a49e3462ecf701e188a5a65f37e812c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766088e0961e6660c773c24f302a08915f85fefbe2032887d5fd93b3fcf1dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-gembus55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961608a9c40ba29fae4c63a3be5a43a0410745500ffb17c2aa5ce2f615629370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117163 Malicious code in socialist_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74dd473ab40847d45580d8e62ffcb291b8c1b75385eb39d74350a7ddfd90b563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115126 Malicious code in joni-tahutek37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62b33865f9718e1ba5828afde7213a489d443ee716ff9d9325a4f36233c86bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lupis70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acc8b75bdab4e53166c2129571ec507008583f321ca0493c0287e4dafe86309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68889611a593840fa3f7bbb206ce2c6a70c89c3e24492cddeae4468b91d34965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113009 Malicious code in cheap_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3924069f0264fd3a14ab68fc34c28de6374f0c23570518b7355310b7892ef6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116433 Malicious code in present_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2080620396ad73f68c5b97435d25d5016087393fdd5a16acaf227eaacf842395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99720 Malicious code in awkward_nightingale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4bdf3173bff7242928e9f93ed65d8be23d532e436bee4b3ae7aa2eff99033d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_sheep-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf19fc7f735addd1100929d89582d720f718e019de97353f8d26ed32cd61101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...