MAL-2025-77313 Malicious code in circular_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2150e30532f744ca62d1b9c526fdb405ea9a3391cf3c1f5dd79ab0a03b616d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77447 Malicious code in creative_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9c68d54d6e4d22d8e4a860c9d04e413e78971ef7cf9aae78e9d18a2318c4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82714 Malicious code in zaki-brongkos86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816f574cd631469b1c721e183b87ec5bc649afa37faf924930333afffb706709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79975 Malicious code in maya-miebogor70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acda78fc83cdb482252f617ccd4ab462116281e4012dc8d96563dd237392c69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79858 Malicious code in mahesa-tek48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e0ac1c6edd59739338e5eb5791c744dcb2803bedfb75964f80048ed3b1e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

EUVD-2025-60981

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in vina-kolak92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8a88e51e431ccb323ef82bf023f527cd03a1781a34083f9b835af031fb81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-lapis99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669e7e20df0572b4ad05650b373ed1629f1d5bff0558bd54c3cae0a447b40273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mendoan6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384c122ee74eefdf4643087cfa950d03e95f4b47bbff60910747f7301e8a7843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jengkol86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c28a30fdc20b96194e214e2746be378683815cc71a22863f6248ebe6210f1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-telurtahu46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8bf1271956adfdc0c388ffe8decd476b6b5f497716cc04e6ec809c0614f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serabi67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8995964f34ba2e3bcae548d4597dd309a9f249f82892079928a3fa2f03f05a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupat31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079ccdbb46a73022b7cf455770a839bc5de22c413661b33e8be126f3d6a153d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-jengkol51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a141d1c25f1f5c9a36feb331701f5c046c3afd2b09388cc23c0c3b247045c2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-sambel59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40583bdd8f4492eec3a5bbcf5661c2b97e30a868faada49b2981757576b26bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73735 Malicious code in joko-lutis40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905ae8143797462b37dcd1837d26e380a19b861bf603f0174edd8607f3fdce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-klanting66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb75750e10230a515f30020bae5ed37454146957883d47b6a0e8db9f2d8cf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-menjes21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff3061f95b1ab78434317286df6dfb58deae404f14ab88184bce08f0cf44e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...