MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Simple Downloads List plugin unauthorized data modification vulnerability

WordPress Simple Downloads List plugin is a plugin for managing file downloads that allows users to create and manage file download lists on their website. An unauthorized data modification vulnerability exists in the WordPress Simple Downloads List plugin, which can be exploited by attackers to...

Malicious code in vera-kupang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cfb30cb92b5f87a1826a0ca9cb5f9ef3b468b03727d823eb9396ba76cd9dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135194 Malicious code in lina-rawon81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739d01801e2f01c1a1c94c70d2ed12ca54ad8fd532355a1a25806a5334e261e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gorengan23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a986545645c2f5ad5a750f7e0f400229bdc2e4a3495d474903e457d9e97f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasisayur31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8974e5e2ccd56f90206fb1319dc773c9181a3f93b978b318add7736e3f2051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-getuk6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6746dd83f450806979ce40e93f9e243524f4cca7091f85bd9102de929b8bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d68629467a2238085832f14aaa5c9bcf22f20b11648d6b592ae380150d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mie86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d335baea86dcf562b99a9cf8c243235d1f6811c9b8b8c9767225a3df92a3d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mieayam62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f9d304a47f2acecc34c7ea7d28b9eea86de81d11b525bb7ccb37a20b037cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-bakwan54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19ce10687cecc975519ffcd4924f66178f268d6c505226ac28811c01c64d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sego36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed2ee7644ea5348940590900ad35d97137f73f209daa8c83d1d9853d9c7963b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sambel85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e711902823ad1378bc1d624f72a69b41f7f7b7b464c4feca9d17ce1ce9f1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gembus72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f76f452fbca59b2bf6554816a557551e48eb367cb63f40792647aec8685921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-ubi69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d75502d40983e8ddc44bfb78b8261e84918ab0f147cb0e876b0b92cfc67f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rujaksoto83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d786cc9ae4e82b360948616090e7d393d09aa6a5d8800a5ef95f808f6c35bda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b3f153c8aeb20fac848f8e84a28f8365ef875ab725150a01f9f4eda076c94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tahu60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0767df6c6503c11e9871cf9d84830a725dd12b48f1c40135bfbba885529825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-otak-otak31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea575ff010826b8b32384db796ebae58c09d636166d94f6207885e731df1069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...