MAL-2025-172065 Malicious code in apasih-leda-puakimsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ceb52a81d983250e8c6efeb6f165be9c82af086940dec8043b0d0f14d855d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

UBUNTU-CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156643 Malicious code in inufgi-gota-jamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2290e77f0b677e85ff72ea7401cf01ad6fa41a56cb1db3089a7484b21b054318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156095 Malicious code in ilal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cd6543a1f33a5383b893d056b7cefdee956d61e94a9e6dfed421c29459b0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170561 Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150009 Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d054dc6a1bc4540f5641dbc88c59c17d3181bf1c2c989204f6211163db77e2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb90ba99390cb39a1c7747978e1c6db3a3542aa1950f2af4965cf7afa526ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilope-aranogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b748b95441c49a3d1e999656ef1ef2df6ced277efa7150b59f2e045530d08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3149813cd96c29ff7c811c175bd9034e12068a33ee8ede1d4b8526679b5d817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f283baae6889a0013abe15550be486fee6dac12ce2d6fbb1a8931af6065e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153871 Malicious code in bitha-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee994ec6d82ebc1ad956930eda682668a42c7db0afc4a94b1eab7abe94ecf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155083 Malicious code in fini-savion-trans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c522b75886a74d5060eb03a1e5fb01f1762eae2bf0ae905bca07adf2ccec8ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168943 Malicious code in tehah-badutsafi-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb4867bc3c06c06d6b4393cb0b5c9f406a7b68c23e2bd92767e1d13083acaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151122 Malicious code in abeh-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c879be3a43c608e1bda997c9255ea5cd18ab018edebe1867e61f407d568dd4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157831 Malicious code in kuinsu-ukiu-vilkuaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2104f6c5b55f913f4d505b3737f510369073c21b16a92ffdc45b58aa125c9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163265 Malicious code in nokire-nanali14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c6ebd5988ab6ef44dfea92039647660beeee9d029d095c84a51a4e5b0bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...