MAL-2025-177883 Malicious code in polymer-avonnf-aba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21a5fcf9eec3f462466a980e02d24d8d6021ff90d1e3d9066acf7e18871494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff19da5a13803fad59e3e03aaadedf40e133891761b4a8d20a205f94f4808d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rusmay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c987336d925c775d6a1dc13ddbb4fb654ad57ddf3e8bbde993e624bef199678b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172695 Malicious code in abeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fc1201ec9d22fca32136c586c79f88b75d88d7946822972ce6a49e93055e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177020 Malicious code in nuyar-adair-banerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79281bff5d282062572d0ef98b94ebdd99d38f2df4fca01f709078f7efc63c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inappyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aa8e10f1b5c9cdc3a3d41a9faddaa5952f3bc8c4266cd66eadb34636a6e9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-60646

A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

Malicious code in augis-lepaod-gulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbca726111589bf664c0beeb1efc26976493d648f6accb0bc980a51cde2426ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fgosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a19c92caf8b41e26903469c0b24126c445e6a5c619cd1926e76372f98359c2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namesi-maivla-aiubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4df234415c7da88fff136fda482639311563406d5645c2d0edc39edfd3571f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f02ad38697cd673544ca7f694586c335514cb142c56463d9dd703c3c499229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uinani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c8eff1e474153e8888b3e908433547274b0f3a47a769118bb84ef25c3b5ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172340 Malicious code in guide-maia-ubalimanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4fe6e4b2cea25a5aceec17ea01c1b2d0c76e6325a4ae40b25a48673d325019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172136 Malicious code in aps-leadang-maan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb79a24d74206bfd1a80a90a3e14d719b5b23fbcd03215db35a80fe8f59ac49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172587 Malicious code in verts-otimo-nagfiogaaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7608e6c6dd4704710ed272d54c2ef24b77ef218723e34fc8b154c3659d4b4da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matila-unpmfid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eca3a41cb91877be3428aa982c5b80e26076a1abbd396696bf39243506713c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apsi-ledang-maanassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a488aae0923d9d2793905ea06dc544c066f37955a2845d9caacbac2f3ab44828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimon-ofbogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ac47542b50204b78c18321451e816ae169158a82b1db08c44ab1e5e9f62a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munapipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d7f12ecb514d1cdb1386bd1df992e2a4b8dd542f89b604e2d42361f3445e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...