MAL-2025-184114 Malicious code in mlokok-lofeaki-akgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825819bc05d8778459bf49e40137304f104c86407534bbb8e4a0e00e45071e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183167 Malicious code in item-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9eb033eee83203f5bac153347a544e260241493a8e2ed19ce21329be73c5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182145 Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182226 Malicious code in gociy-ung-ugauadsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec83d9b8ec067658d52a6dfee9a6153316afab3b1d5f387c0e5dcf4e3ed319f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185047 Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183309 Malicious code in libc-ubg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2220998ace09a52355c3bfe6a1070cbc6c6d580c59ac7b198767e37075aee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181360 Malicious code in ayang94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526b8cc355aa5a76af16f288e12aa69a2885d2142ce9e4e86173bae78ef78b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080fcaf23e42f08af458ef67362f8045a7558a0108f55462d566924f82294f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nafiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01789f759f45d53a06dfa8ad5eec9e85399237eeffe79f08525ff24e972eff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-narot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62622847878a5b7687d01d1c183021a7ac81e490644c020a41c6791cbed41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180329 Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180056 Malicious code in teate-thy-py-ebwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699587931c26c20e57d0bb1a5446a4bcfb1e96310e3163cb20495b51b963a224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181044 Malicious code in teate-thy-sonic-vemza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5a4b6eaa90f8f6fdd8d18dbad2e17e602258aad97966157c9f642380dfa43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-008

The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...

Malicious code in anita-buyafu-mgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d0741207def77a4f46f3ba642e85dd3604146a44ebb89e072230dffcdf0505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0bdc3e7243acaa060ee6f0d4803eb26c90b786f72a2fc7322de2c07bb2cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d907d5cd10e4ca3e1cc8b1460e7f78b12a7f02c77245aa3a9b795d2b5dab5122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02450090952336efeb3741bf889e4d6a101db58ba06670f2f81394116fcd076f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...