MAL-2025-80572 Malicious code in patria-bakwan99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6149dbebd890cb699cd95d4b035f793d2cc4f5918aa82acf00702e4c8250bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81668 Malicious code in tiara-sambel24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a7f93e276b521713d25d256ce994cfa37086f65b7c74b7eab5ffe8d325ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80308 Malicious code in nursing_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eeb1e61413c35170d43cf53c9b863a5464486689df412bad8e24615d3da714c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77088 Malicious code in bold_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d7e22b9590f3bd79c7540e2394b81de6de82939c9ee6e929598a5ea13de66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77447 Malicious code in creative_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9c68d54d6e4d22d8e4a860c9d04e413e78971ef7cf9aae78e9d18a2318c4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82714 Malicious code in zaki-brongkos86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816f574cd631469b1c721e183b87ec5bc649afa37faf924930333afffb706709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77269 Malicious code in cici-teh63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655e79134765904795348038b476b4c5d8ec9b28389ed0725ac152522fe4a78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77471 Malicious code in dark_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddbedaf0d3a454f0883fa4bb318fe4b043e2301451963a0cc1c1554165f8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77316 Malicious code in citra-brongkos21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8a7d6ba7d77a58d49c9d76c3f89d58739e1c3c9311e90638d7e9645966bd12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82632 Malicious code in yuni-nasi89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3418342f349bd2c58d3d30f38b0be6176971554f46695b95e8592a922f726f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81468 Malicious code in statistical_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557579dc021404e16027dd0673ac7a6a1780d596155706d40055d7d807ca0d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78619 Malicious code in hadi-serimuka38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba990f82d892633a70ca50a88b88227d1b4b8ab36757911f1c3f12b5a95e8ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78093 Malicious code in fajar-gandul67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba322cfcfac7a4bfdc260054d751d07aba735bc588e84e4c1707e21e9b16e1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78743 Malicious code in hendra-bakso97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a27de9914c26d5ffa7d9d49ae7d1a0bcb870e62c6e228ac6408b14c732939b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

EUVD-2025-60981

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in vina-kolak92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8a88e51e431ccb323ef82bf023f527cd03a1781a34083f9b835af031fb81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mendoan6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384c122ee74eefdf4643087cfa950d03e95f4b47bbff60910747f7301e8a7843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jengkol86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c28a30fdc20b96194e214e2746be378683815cc71a22863f6248ebe6210f1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...