MAL-2025-104206 Malicious code in injured_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170bd723ab9d6bb52c5aff556224195c272ca9511693ad4b3a35b400b6c7b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102356 Malicious code in existing_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6e5e94b36b9ab19bacc73b395451e4af182e6094194b12e5bfc8df812f2771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106653 Malicious code in okta-ruwet80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2bef4cb3680b2008ae0c56ecfb7a34bf100225f1b78d5f026bdfcaecdaf9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104792 Malicious code in kiki-kue94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913acd58886fce93ce78acfa108b0c7f344840244247ca2406c10ac23d57dd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102749 Malicious code in fit_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d341fae7f36119d68d4e474239d988525c6fe1f3968d2ea7e3904261fb6fa96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107592 Malicious code in qori-lutis79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f497ffaa622e3d808798bcd87b3117f57a782faa70f983514fc455e8a4bb17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99167 Malicious code in ade-serimuka96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc1588587653605d3bbb746e8e39b95959bc8ab960b0930b2bf15d366bd1561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4496cca838d1a9db6519be8d6d21873b094a28eaa34f0adaf5d390bb333618f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e94c7184a50c7faa364b73fed8caef84f349b4c3921f852d083bab22be653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98799 Malicious code in magic_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf845221046c6a67bdda2ed8ee460c4496288a3203d42979475264f710fe91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98614 Malicious code in alone_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67836b8f8cc1a026068ad3ad5943d9e4e8b7d6dc16252f763a8e2e27827214b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c94be3903bb7b5289fe5baf5196194f125820bb116216178b855ad49af809a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5173512fec3ed1b1fbb3037c9a990e58b1c697bd9dc672b768c548cfaa5c19f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacc82e97e6cdf96325a252991f25adf6d6dc64d628210f587682c204e3260f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98791 Malicious code in light_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2994362e775c799e510f405ee4a4ff3faf62eb4cb2f92c4ee048f52156190c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98613 Malicious code in allied_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce964c20d4f279d0668df6c6906f0bf29f4960a3798f11a62778d4b5ba913c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98795 Malicious code in logical_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d478ec8d22d51234672de71c8c99e88cc230c4914f070f54a8fee91e9b8d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98831 Malicious code in natural_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713b2f9b888a0c87b1e72cdc68b3230ab5d7bb0fc5cc8defb2f2eb536e509a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60929

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in laila-bubursumsum26-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118fa2c49734bb6868fafa2981a8c4dacb63a9c85bc662c4ef5801d71552736f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...