MAL-2025-64821 Malicious code in private_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4310a5ebbf3925455fb0cb6a8679655ee7dc0229393ab244921cdd5b35978f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65221 Malicious code in sari-enting80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a20a747d7e7dc0707de4c6651a41828324fb0223f8a8686915f9644684a892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63254 Malicious code in hadi-tongseng73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f255a0d08a967ab3970dec73949bf98d3c34144e226455a92646852342cfb18c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62088 Malicious code in bella-rojak9-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a6c4101b6d28cdc4316d7abf1ba6f9f08aaea0ecb2e5936a0a99af5e9a6f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63497

The patient prescription viewing functionality in hisdocviewsinglepatient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The patnumber GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attacke...

CVE-2025-63834

creationtimestamp| type| source ---|---|--- 2025-11-10 18:32:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cay37lcs62 2025-11-10 19:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cf5kwis22s...

Malicious code in reluctant_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f944ef0e9435b749fd3b97cd812dde3a5e2ae8a55853c636792d17bcf08a5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17f4cf0f7b70b8ec583706d10047717ef84c0367670aec3a1aa1abc74170bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1bbf1836946a719398d374e99d365fc0d449aaa2e50bee9ea80a780d17e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf82b4338dc72bd8268bd4db88a344adc6937f04a86db42b422f91f22d7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bf31b704f788d5ad3b8572ef8bb855747dd1c8edfca0fe30eae11c17b6289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f0f90a000cc7e9de49ffb11d7a28744bc9812818b5c8ddb50290cd5c0eea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb7383c6882421c947f480b5398d0c4f89e2c14755c7cf4419488f8bda6068a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 166da16f8b24ec2023d634f79812e4a67181ac6d9c04f9a3668141ad7c36f959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e155fefdc0badfe7156c5e022f7d5d13babf73fe439e7d7b8c07ceb7ceacad77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f98f28f3be8c7cc3b82a0281cbe749bcf7ed1c14e69e209caf711857cacbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61626 Malicious code in well_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42828403f080bdd8abf7a29d99115b8fa7141f7b946031066c32baf4371a71ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919a898ac97e4db8c2b6da955fe51e66e699306814db7f6bae0a2a9ab5091b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60952 Malicious code in obliged_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39747ece0c09b2dab23d8795591558ac8d376cce72b8fb9022c35a4b7245796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...