MAL-2025-102749 Malicious code in fit_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d341fae7f36119d68d4e474239d988525c6fe1f3968d2ea7e3904261fb6fa96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99167 Malicious code in ade-serimuka96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc1588587653605d3bbb746e8e39b95959bc8ab960b0930b2bf15d366bd1561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105411 Malicious code in lutfi-lumpur44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9d87620c88ecb95d82af193080a4aa058b3ac02019f78a7217770e4a2b49aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101483 Malicious code in dewi-ragi46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f46a58004eb752af90675b5cae4ba1123d1d1c6ab27beb954064617be04dadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104792 Malicious code in kiki-kue94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913acd58886fce93ce78acfa108b0c7f344840244247ca2406c10ac23d57dd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106653 Malicious code in okta-ruwet80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2bef4cb3680b2008ae0c56ecfb7a34bf100225f1b78d5f026bdfcaecdaf9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4496cca838d1a9db6519be8d6d21873b094a28eaa34f0adaf5d390bb333618f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e94c7184a50c7faa364b73fed8caef84f349b4c3921f852d083bab22be653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98799 Malicious code in magic_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf845221046c6a67bdda2ed8ee460c4496288a3203d42979475264f710fe91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98614 Malicious code in alone_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67836b8f8cc1a026068ad3ad5943d9e4e8b7d6dc16252f763a8e2e27827214b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c94be3903bb7b5289fe5baf5196194f125820bb116216178b855ad49af809a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98613 Malicious code in allied_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce964c20d4f279d0668df6c6906f0bf29f4960a3798f11a62778d4b5ba913c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5173512fec3ed1b1fbb3037c9a990e58b1c697bd9dc672b768c548cfaa5c19f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacc82e97e6cdf96325a252991f25adf6d6dc64d628210f587682c204e3260f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98795 Malicious code in logical_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d478ec8d22d51234672de71c8c99e88cc230c4914f070f54a8fee91e9b8d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98791 Malicious code in light_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2994362e775c799e510f405ee4a4ff3faf62eb4cb2f92c4ee048f52156190c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98831 Malicious code in natural_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713b2f9b888a0c87b1e72cdc68b3230ab5d7bb0fc5cc8defb2f2eb536e509a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60929

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in pelican_violet-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3682ebc48cd466553d93f9571296ac09a4970a30f3c62f318d140d105c8858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-miemee68-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c74ff0550e8a7504dbc38475b8286558edb5042b2a2f5e1cdec50ad4fdf661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...