MAL-2025-77088 Malicious code in bold_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d7e22b9590f3bd79c7540e2394b81de6de82939c9ee6e929598a5ea13de66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77471 Malicious code in dark_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddbedaf0d3a454f0883fa4bb318fe4b043e2301451963a0cc1c1554165f8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80308 Malicious code in nursing_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eeb1e61413c35170d43cf53c9b863a5464486689df412bad8e24615d3da714c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79975 Malicious code in maya-miebogor70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acda78fc83cdb482252f617ccd4ab462116281e4012dc8d96563dd237392c69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79858 Malicious code in mahesa-tek48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e0ac1c6edd59739338e5eb5791c744dcb2803bedfb75964f80048ed3b1e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81668 Malicious code in tiara-sambel24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a7f93e276b521713d25d256ce994cfa37086f65b7c74b7eab5ffe8d325ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82714 Malicious code in zaki-brongkos86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816f574cd631469b1c721e183b87ec5bc649afa37faf924930333afffb706709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80572 Malicious code in patria-bakwan99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6149dbebd890cb699cd95d4b035f793d2cc4f5918aa82acf00702e4c8250bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78743 Malicious code in hendra-bakso97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a27de9914c26d5ffa7d9d49ae7d1a0bcb870e62c6e228ac6408b14c732939b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77269 Malicious code in cici-teh63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655e79134765904795348038b476b4c5d8ec9b28389ed0725ac152522fe4a78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tahutek72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba312aa4ff67a62138fd00aceb08bc8ed35854e093b2fc121dbd2ec9e280f92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77313 Malicious code in circular_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2150e30532f744ca62d1b9c526fdb405ea9a3391cf3c1f5dd79ab0a03b616d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77447 Malicious code in creative_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9c68d54d6e4d22d8e4a860c9d04e413e78971ef7cf9aae78e9d18a2318c4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79011 Malicious code in irma-empal19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a83a56e1e9f04f0684bce54782a783596bcdb649e799981c2504736e0af9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

EUVD-2025-60981

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in tuti-esdoger53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ab24941a2262089329e15ece5f8072e7f875bd34472746942ad7bf9de15cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-bubur22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce11e1748cc4d292981919b16e943f9f9caf7b433340245d403b1674a5863ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kolak92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8a88e51e431ccb323ef82bf023f527cd03a1781a34083f9b835af031fb81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...