CVE-2025-12903

The CVE-2025-12903 concerns the WordPress plugin Payment Plugins Braintree For WooCommerce. It affects all versions up to 3.2.78 and arises from a missing capability check on the REST endpoint wc-braintree/v1/3ds/vaulted_nonce, registered with permission_callback set to __return_true. This allows...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-slidev-antd-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be2c69fad5b110b2dbeeea015fbe299ab9aa61c3feaa29d68a296c5fbf22be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-helios-carpo-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc2186a8b8d2cef5c43c813a9358578692c3659d29973ad9eafd99ac01cad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-izar-subscription-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8681257e1e1eff9e0b4be2eb9aaee7190c6c99222e20e0f2d9e0508d2fee6c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149812 Malicious code in yildun-dynamo-halley-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b626362eeed55bae9bb863aa98c40db9cfbabd1af02b8ffe4a9ffd65fed432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-charon-hyperion-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2f2d089a90c3c3b1dde64cf335631b185d51d318006a25ec5fb1376e7a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146249 Malicious code in pino-rate-limiter-nconf-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2007d321e467534524557879fce285a8b90bc93b51de29e08cc7ab4b7383440d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146169 Malicious code in phoebe-pavo-grus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a2a606b8dcb49d586718615dca3a20876645f3d5a3d5f21e04dd421df311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-oberon-json-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cb20254e1fba013cee3ebbdc026315453ab57faff4d5dd7e2f54f5ae271983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139370 Malicious code in altair-ultra-grunt-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff770cec8eb98e87d441bbd3804ca0cf7dee5cf9ea569733a7a118df8e241c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140430 Malicious code in carpo-async-ganymede-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30455e0f409485a1dc7ed4659e0f3c508d3a48c6b811106230b3a148fbc8881d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146633 Malicious code in promise-bellatrix-helios-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2bc2261e80b41b4ab426dc70dd2937838890d8d5ea543a3819a37e3e44e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141201 Malicious code in cosmos-browserify-transport-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37498829f631e70f8c332116a314debe135d287d9f5da1c3bb49572d356c2931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149714 Malicious code in xerxes-playwright-quito-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cda26e6f69e769852c6b4cefd15c3800d63895934ebaabd557f880c5564f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...