Malicious code in spawn-miranda-publish-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abecc7f7e41575adec56452069c9e78b09579af5a2bfa19b17d85134384036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-impulse-decoherence-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58284e42bf4777ae90b372bb825073354f20b88b702efc139f25470f6e037fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-dependencies-paleoanthropology-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5aa35035cef2c1cc6c6bdb74528d86c9297519b890f65258d575cbc34a28f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189771 Malicious code in superposition-brane-gravity-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9c82c048bb292bb73d9d46a6684296f3b4daf92daf54aa70d1879d885c4731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Malicious code in lobac-ubb-afayorg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb11352d602079c3f4e272e7ea2d13acac1dc71557d9a5b66cfbe4b9ae90cb66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184219 Malicious code in modasiv-kuvu-baufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056fcd6ade17a0c78b17b92cc5bd7fde37aacc7e355aa349e274087669a8866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184327 Malicious code in modiov-kifni-ufbaceuax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913123791129514858c043d132ca0976ebbb06d53c3dbc4a937c606a090a89eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182446 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehxafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581da1f5c7a82897e8b6909326a0e405918f978d0638ac2caa84de710100997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181076 Malicious code in teate-thy-sonic-watig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153abf4a66eb4e8931d2b0a2676378b2c8f1489e771a898545c3fb37a08122be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178412 Malicious code in sahnim-sati-anjifangaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada91e8be789ff1a473821536fc1f57880fc91e0083811b8c7fe43c6f511a00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177492 Malicious code in poglymer-ognagh-amifagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21940f1bd552f6276659975b66db617245664bfdfb8a4318f92cfb32827a8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daujhiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe292d79796983b76219c950d9957ca0f11dc6a5420ac969b9c70af0bc7c03c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173388 Malicious code in buta-fbna-goafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817543764a82fee68074c9e6bdbd7711d64c97b8fc362e93ceb961432b3cd16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172766 Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175292 Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174765 Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177640 Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178340 Malicious code in rrramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab5acf0077ceb9071bdcb2f366394909c6700c9d61cfbeaa7809330a5fd8b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-manafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df68cfbb246776c668fba48113a09d2848cc5fc266ba021d54449dd9188cfd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...