MAL-2025-55444 Malicious code in budi-kupang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5b3558d4fbbd4aa111c5722f37c8f35091b0f32c1a9310c69f7c16db9e2809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Server-Side Request Forgery (SSRF)

cors-anywhere is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to instances being configured as open proxies that forward attacker-controlled target URLs, methods, and headers without restriction, which allows an attacker to induce requests to internal-only endpoints...

Malicious code in sinta-kue52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afc107b0512e2f701e01207e3bfca50ce59b0fcfb53bd826d8355034fdc19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54907 Malicious code in siska-ikan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5d437de676ea783d2bc8958718d3b93d2efaae1a126297d49da584b95fa5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lepet22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ee6e1ebc876d10b0cc2371d34abaf6ef22a70dd031d7e473769571af4317e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-klipo88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86834bdc3efabaa68a17b832d1682b031b94a8ede618d1a33022c1b0c6b70613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-keripik78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81e32920c1e35600ece2bfdd1796df3b4d74aef168a217dc8b7155000b3beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-oblok65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d74b92675f0158e67f3f28966967596fd063449a1f365be439d95e0d999a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ketoprak73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd15dc036a28fd636593a8ecbb356965285ce6f2c32fba439ce7c194aed92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-mieayam2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51462b64fc034c05c8ecba109b4dfb08caa64010a24e1859e56b6e232a80416a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasipecel62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e7ac55a8bcb6ea6b8d3c9ebd456122c61193879ac99a2a151df2c290a4d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54289 Malicious code in putri-bubur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0041736adbce980c213e92b17e482a0b0cbe443f3ee8f7890a03fa70de8115d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53865 Malicious code in ogi-liwet82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521dee0e6385312371b2d5560a52da8eca0ef50614ab5119df55177e4a0cb3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54759 Malicious code in rudi-menjes92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20aebad12a26644d2ccc5c476e62dbfafab44fdb50078ea3570abfe2c6aba277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53717 Malicious code in irma-jamblang54-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4de02e8747840d077d9fbad4d67bda813754a91f23f23a36b87c895dc5eca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-kepok74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532e19ab755815054b0b7043fbdf6671cb933d1996cb2f08252334ac34665eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-buburayam24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7a5a22ecea4e6dd945124d7ff02cef43c1f0d6281e5bfb31f8262f0bf5a7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tapai72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436296a5b7cf501aca821e507bc53860fa88642604bd1ae4342a8df0d8815c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-wajit33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df91567556fca3b706811e28fce26e8cb3ba08cf20ca635e3d227fee340dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-kue96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44985c3b3d09c85f6b90fa5d70317f6b291ef903389876643d3c27920577f496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...