MAL-2025-104457 Malicious code in iwan-lepet90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2e600c722751ca22620558a5a6c42fa56d8e12e1660b9dee4c67a109d89b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100208 Malicious code in calm_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064527115524ecd3985cc458482e7c015ac9357acf8f2ce254f10d6957eb63e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99310 Malicious code in agus-mie26-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a19df4f8b262ad120ed2fdb4f19b177a176e1917293c335e6c383769b54c767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111395 Malicious code in yuni-rojak6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852319e0b05aa0699e38f4015ca2d8b9ef3e5bd661953238472e41190e9f38a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101537 Malicious code in dian-nasiuduk49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4788923595b7e2a670a482a06eb1031ebe75d871096e69383e8f5aa8c8edd494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103914 Malicious code in ida-serabi89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03806bb5b6e9b8b966e6c0e904b6b6b7524ff47e736546722be46f9bc7a62107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104864 Malicious code in kresna-lapis64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca790ea47957f25d6eb897e5d9abcf21135e2994375d9bef739d701c55cce460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106701 Malicious code in oktafian-ruwet29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d59e132a972f728b99e014bba6cd626034b328cd38a93ee1cc4a851db5bd490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98973 Malicious code in troubled_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d4da2d323ce3a552a495bd2dd7870235f49024876c818d331f0aa5090896a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98956 Malicious code in systematic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6a3846c5602492aeec99b4bfbce3316bd67233095c759ec3dde3d6cfb20ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a6080d162f94eed8b21389b11e7f363e05f2552faa7a042c1827e8319af300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98712 Malicious code in exuberant_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7a82d7b5eb22f366cd2159fc7d7d1e683a60781bbb9cca4d1df75d761d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60928

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access a...

Malicious code in mulyono-sroto45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e7aae3835a767b476a5bb1c12b3244274c9cc4b98e6640a1a87b2126c92b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-pisang37-puyeng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98ac0053dcab1ba08adfcda23dc3ce45813633164248f279f6ae0aab1ede53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97979 Malicious code in joko-ongol-ongol64-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e9b367595247fd41e31e696e272da0dce5c421b886615d5f33bef0b7c23c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang37-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c933aeee3e3f462fbe77af21a88af7782fbe53d6233454af4d5e12456a43e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97869 Malicious code in hadi-mieayam5-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc005bff092263682629973930c80bc3aac279ab9b7b5777f2f277b63854172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98332 Malicious code in sari-klanting39-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516ac18437a1fbe13870d8e83a8b96909f885696f7ef3cde0cc9bbf50ac1793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98437 Malicious code in udin-otak-otak1-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa600830c6c235e3087f12e38c93981c9a054040d532f08f982abd10767c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...