Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141277

Malicious code in ira-7 npm...

MAL-2025-178336 Malicious code in riya-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4810bc0c14186540e44f093caa65f9cfac3cfcf456527a49097e1d694a1f651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f063445b35750f510e52b772f5e670fc168d6327cffc492dd2b61d999ed304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135718

Malicious code in tearich-racing7 npm...

EUVD-2025-135719

Malicious code in tearich-racing7 npm...

EUVD-2025-140387

Malicious code in lia-7 npm...

Malicious code in sumpel-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafbf55daefe19b5f9f9e98a22ebc4aaa4731b6535ddf0ef234207923f527dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141283

Malicious code in ira-47 npm...

MAL-2025-174791 Malicious code in hokage-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042018ebe8dd474c23147d714f5b0a2e883b4c3b7b9e19af096a75dab87e577a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

UBUNTU-CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Malicious code in dia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521364930eb4d57f7fac3ad981ca3260b96011a1f7e744fde3e9ad3659b732c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ecdda2809b83c746bdfdc0d0104497c33716adff19908380478b0ff80d11a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff68d2aa72828dd25f7fcdec5a44fb67018193ed3384ad58589ad489759dd6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165280 Malicious code in ruji-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4350175403fdd1744791d44379eb8c7e494911072446816895d1d0f9d8e18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63034ae505aa86d47357a1c5b87ff0fc17346b8f82b661062cc63e99cb4980d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152512 Malicious code in alvira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce7d6fbd637e6c7c86ba20a1d11b86a6ed59ef43458503b0a3df1e08033bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...