Malicious code in perfect_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08c90fec05944412d4390f7a2eb34f6ed8e529d019cb25bbe64cf472978c3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tahutek65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c64d6c581f4ad28ff28c38794ffe76849a87f4e4b2314fe0b8bd8c8454461d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d10b40ed02af26355cbce6810ac2a974b6934626357ba6ed8b377eb8378c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cc458711829ffa4bd8108ac6a90e70d35d827f70546c2adb2c49e21ae4ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klentik28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a95449e11cdc84fc49b7de52470ae9744db1f007c67952cfebae2635ae829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117489 Malicious code in tomi-lumpur78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccd5d1d1b35ce6322de9770dfe2af46c6f9c9e5422827b109f707c805d8cdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118019 Malicious code in wawan-nasicampur40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857eca20c9078828a5643877f8fa906d4e71ec70044c6c5ad5f2be8c3cb07fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116995 Malicious code in secondary_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f94a775e5ad69d701a7a9db72acde2183c1e699424190af09a08e5ec90238c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in probable_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbabc0434ab330b468ac5e7bf8dc846d935c740368f215f9290d2fb414bf9647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116827 Malicious code in rina-kue93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53be40b4ce99fc5aafaf9d0e2bf3bd06c571288f831da9c981129e63962beaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113181 Malicious code in coming_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c59abdbdf7c0362743293981d6479e93e4e870a79328430e9cd784a8ea16251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114579 Malicious code in healthy_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56321805b857457e0dd20cb55a92e8bc42de8c83f4388eeb5e44c0b1beeb2530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116366 Malicious code in patria-menjes62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7314835b5e8dda08141013567da6fdb97fe634d5ab04638f0d79bd06210b18ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115954 Malicious code in nana-martabak66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbd7335ef7261bf5c838468be9eb47ea0e3c559bf54beefb98999099abbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff9c588aabbb4afe7ab2d87744be82cfde6ecb652797e969d68bee931eeb012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-telur18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19df806f4e130d2c78bbdd6d0e4915fbb56c8e5997b5605da1ecccdadf352d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84362

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...

Fake NPM Package With 206K Downloads Targeted GitHub for Credentials (UPDATED)

Veracode Threat Research exposed a targeted typosquatting attack on npm, where the malicious package @acitons/artifact stole GitHub tokens. Learn how this supply chain failure threatened the GitHub organisation's code...

CVE-2025-12787

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...

Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...