MAL-2025-107669 Malicious code in quintessential_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871d609ea7d4077d5397abab05f83a14038a8ffccaf464d685a0caac892e4ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111229 Malicious code in yanti-tempe48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7b2d433ce8e4f8fdafa4e0581cb3a8e6ba02434dc5ce9123bf0273859643ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104627 Malicious code in joko-ongol-ongol77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5267f939a74e1fa0905f8efd4a0058dacfb5a7e55d8da017f4691ed8a58a90c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105618 Malicious code in marine_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb0bd435276b31f80650d1fff93c744a6b54d6dab5d3dcdfd7e8915e3833fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4479eb0993d83b69c59c33a427cdc1bb555978f9378681780e3dcf5ec8e9a299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488c87f7e559daa24ac229e1fec58a5046a468defc22d0458cfe6554b41a15bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f2f11e536fbe2c66b05b808d18af7ffa723b16b843fe083df60ee6879df91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98870 Malicious code in plastic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a506fd44700f1d602dd8d67204c2cb799f713e6e2a5ac7c7639520a97091fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317be55f61d6c2e6e2d36b7d4779928fb72d7b699c1a05ad6c52c6bdc53e5853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60922

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

Malicious code in sari-sego46-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0a11362c103513a3bbe8ce82c504d48b6b603f1222f9672df102b9e6647b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kripik33-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e536ed8e87a6f19c02673137d576f2e5da64b4c801aa401a35839dc3f82c2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97793 Malicious code in fajar-sambel28-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392ee0b372a297b2054bb061e3cfa7319d5cab5990a6eb3e7eec0bfa4d02706b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98235 Malicious code in patria-empal64-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c436eda719bd9fcdd3fb0b877deac4b46aaaf5c648269bb8b4ec871b5b865918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ketan84-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c751a4b3e756915ce46ef5b88c5e4ffd50e28a184b6d50ae2e0d7e461a30b0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-menjes15-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec7c409a45a1ec8a36c1d25abb80e507451d87669a16d159bd97d1cdfa85906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97816 Malicious code in fitri-ronde25-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d7c136d011c604a585e70da7aa14a1b9db84277cf5eb648f9d847dd8e2ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97964 Malicious code in jellyfish_black-61-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402595fb44ab6609233e71ee378a68e620f71373b213636ddb7b264a563d67fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98574 Malicious code in zaki-brengkes96-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2965bbb69204fcea5968e499026e127e4f8281f4caccfdfce18e6a1de9e6a54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97723 Malicious code in dono-ronde20-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30f06de5b8e406fe46815d67b122ef8254e7a016a0c9f1bc39d062e1da60e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...