MAL-2025-183183 Malicious code in kidt-avog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a0c4b70f30432aee1f167454174cfd8b776581addd06401f8aa0e438ad545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184114 Malicious code in mlokok-lofeaki-akgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825819bc05d8778459bf49e40137304f104c86407534bbb8e4a0e00e45071e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183167 Malicious code in item-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9eb033eee83203f5bac153347a544e260241493a8e2ed19ce21329be73c5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182226 Malicious code in gociy-ung-ugauadsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec83d9b8ec067658d52a6dfee9a6153316afab3b1d5f387c0e5dcf4e3ed319f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181360 Malicious code in ayang94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526b8cc355aa5a76af16f288e12aa69a2885d2142ce9e4e86173bae78ef78b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080fcaf23e42f08af458ef67362f8045a7558a0108f55462d566924f82294f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nafiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01789f759f45d53a06dfa8ad5eec9e85399237eeffe79f08525ff24e972eff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180329 Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181044 Malicious code in teate-thy-sonic-vemza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5a4b6eaa90f8f6fdd8d18dbad2e17e602258aad97966157c9f642380dfa43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-narot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62622847878a5b7687d01d1c183021a7ac81e490644c020a41c6791cbed41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180056 Malicious code in teate-thy-py-ebwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699587931c26c20e57d0bb1a5446a4bcfb1e96310e3163cb20495b51b963a224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-008

The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...

Malicious code in polymer-afavof-afasofavbagdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c6d46481a83389587cd80bc07b9f9cbb3d48bbc7e6af1539f2f9543ce97e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175404 Malicious code in kapvino-soni-farsacamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5b2029271db6a8308eebccf1baba93542f2dbaf9ecc6b454ff7ce96d9d6546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d201c468a753fbc959ab49f6b2eb97755ae6ca93b4560e05eea0344df241e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyafu-mgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d0741207def77a4f46f3ba642e85dd3604146a44ebb89e072230dffcdf0505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0bdc3e7243acaa060ee6f0d4803eb26c90b786f72a2fc7322de2c07bb2cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d907d5cd10e4ca3e1cc8b1460e7f78b12a7f02c77245aa3a9b795d2b5dab5122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...