Malicious code in bayu-mieaceh28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83cb7c3fc7165ee2dc22c65fb6eaeacdaa9c1c61ce99d52d8e0f477d339778e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83538 Malicious code in bayu-pisang81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52751ce58c1cb80a155b72017c3e222682de40b0cd05e90c32583e91a04335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88769 Malicious code in nervous_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb87889b40115c097be8d22b2e38dcc37c84c66bfcbb837dea4067339456046b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-pecel67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53af48f9d152756db1f736db78368b941ad0e3b8c31d70980eb4ae92c6249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77073 Malicious code in binding_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d13c4118748df9df98997f4c7c43766a97d09765b585ad6f29dbe03780ee37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79950 Malicious code in maya-kemplang26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaccb205c94488a9af3f5e9e9b51038d7ff6ba6769ec890523ee2ec362c7a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79787 Malicious code in lutfi-moci65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e363ae0277279c5e6ce5a4212155500039f214807f3eaf058a1fecf178a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-semur53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1ac369a8e06a6c955cc8ce42edbfd06d610d2505f0d911011d24dbd314ef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lodeh97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7751eb56e6db6a79ada6f39122326b1c496978cff2b6a79c8027ef2d13e1ae6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6450ad6f9335fe04e892b762ef759be9ba60b219e6843dbbeafb97b6095e5860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rangi38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1bc7b3bcf3dca0d202f3059711cfe367dcf308945bc2d96b9dd5c908abae6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf23dfe71ae1ec3711265ef528b53e1f32878e82c3ab6c0b48428825b269512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75550 Malicious code in surya-semur89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5225f26429bfc487b48576db2c72d8d2f24fa31ca71ab50d97c16c2e53f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-teal-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c634bbb2a7ec8a5a8b68c26702cd247255594cd5ef8c755b3d6814212b475bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68924 Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69445 Malicious code in miyool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa95da6580df72388a2b491f52c1756c733e7383660348c461a4a412f66ace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-pisang92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9e1b095991fc591639ebde56fe55c71a36c37304fc04d0e62e2295f6cf508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ronde30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0b01a8b20418689eb971e58a903dc99e0b5594480c315f50209caed450c894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64888 Malicious code in putri-getuk90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf337a4ecd96922bad95d958b9cd70446883fdf71f1ed0b68baa6c2173d491e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12920

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...