Malicious code in oc-gua-vsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6e6123a645caf59e7fface4348da44fbaa41fed9627d4bdeb283124d759fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugikfobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c59755f297706751f06ce305a4d58f1833838102248274ef959b514a3e2f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185046 Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183084 Malicious code in item-at-labiozkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab643c0de6a871c0567172d77c86766839f1c6c6cc949fc9cecc08a36be5c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183689 Malicious code in manu-oi-gisoag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc0c5aa891c11a484208db8efd96d65e4793acfa80281f4998a530502ee5c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-13063

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected...

CVE-2025-13063 DinukaNavaratna Dee Store authorization

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected...

MAL-2025-180425 Malicious code in teate-thy-sonic-gifwo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc63dafbe83bfd5de6f4d51798e574f4e35fcdaee1875e96d3e1763b87c1eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ceri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fcaefb281ee571a4b373b11a883416a1b08c617d0fcf17b5fa5c8f119cf5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa1b31794dfa1f9b5c2d9f05bca05c699627687e511d2edc24c31679f215fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iuvac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038b6255cfca633b1decfa4bcfaa95ac9223336fefc12962d82109669c107401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4827508504f9f2dd01cc0e877ea1aa8546523352c9f3c86350299e9d66cd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170419 Malicious code in verify-ayisali-gfanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5285a05c3993338b3dbd5be1d5b3583b1fa37d36cbd0d3727dab677673ab5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156902 Malicious code in irashi-se-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a75dea3452b14ce5f252a5623b7422d0f398b3e7658dda1cb4bb95a5a772f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8584f7f71b9a5c5e500facfccd9c495c7c8af8838a015c3b31453536e0a85d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150688 Malicious code in @miptaa02/gfosd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865245e08ef95c42fd4b6349f36cf1e659691a3ffb1b9aca3d02d3f19da70dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158143 Malicious code in lina-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29efba35411847b75a22908f62fe5e94844ad84c845964e5f21415ccb6ee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168138 Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163794 Malicious code in nudela-ofgaf-gafjaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de19fced31d8aeff4175171fcfadf8e9738d52f22af0cd68b018a5d00592ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159279 Malicious code in man-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63246ddcdb49f3d790708ef98c75f8b2f5c8b425127551a31faecf69a8d3f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...