Malicious code in cici-tongseng20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929a15fc2622013d3f693b4e09782bccf62cbfd5ba0d8e8a118321caa39b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-sate19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd280ae1e2c53a623e32d2bc1a0f1ef89f1e2bf3d2090413712d9aef2710ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-gudeg70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe39fe6a9b2f4b192d98802ab387f633c35f379ea3cb1f4080842310adc9b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122676 Malicious code in putri-lontong74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b596a3b687a73908f9cbe586dd72096ba01882dd5558f69914c2b7fa9cdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120348 Malicious code in gita-sasag69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa979e7a2ff650832013e5161d493af2f46867d84cff8a38bc1da34f8b878e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119871 Malicious code in explicit_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7593e04b274d8f9234fbef9248126bfcc22c00d2da8afe8b9c1cf556c7229d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47286

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on i...

Malicious code in formidable_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5365098d113269e2b577f1496f0d77bb7c1fbe65ba2fd6a5107db18246f0cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-botok16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70061c8b9cedc315ddb2ddf42bcf3a7a82f7a968cc6e34a3c5064a28933fa21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gembus89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77a6a9de35e7c26392988ba1476fb1a4b92f29f4f4fbcd4c2485b7883d7606c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41b98204f1e842b8593a670479b85a9f1068bdf2854197be8407de563bd45a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e7e567aa1818cc4267cbbeb6b45266485a1452eaf5f6689776d3bf7a458dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambalado29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943dff4bb4c4a99a22bb5890868e548633ceaa1d417d1e0d5ab72eac021a6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b4d21ba9fc5f607579373ae972f180ce0ce33cb4c32dbcae051d19a26c884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klanting23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d09598c8aab5057f183f572244fcd790a8948eebd9a78bb78c40032b931305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tongseng27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021d6b3111b98587eb02fb949b9fad037414d38fafaa7c36bda99e7ec95c9f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97cdf92bff70cdddd6db2ba0fc14f304dd2935cc2afbac0704390253479d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b89b6efa66b7eb7a0cd2cf01e70258b2810584d12a80ae4e9322095b04043df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kue77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916e58e454c631a697a30dbb67aac56023a0f03f8003eccd7fbedea366f8510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-sambalado69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef227f931c290b469bcd7960b5689309e5f55141f4fea9d469bcc965db02ac0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...