MAL-2025-66229 Malicious code in xaver-soto62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161c05ea16ade0827833f34c9a87b81d5833f38c73864e12a5e2563b40f79c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62539 Malicious code in dian-lontong79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206ae79925f84a884b1f7157627c0ea4997f756e894a0af3f9d4211e508838c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64148 Malicious code in lutfi-rangi1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eac81a8260215fb792d05e820a6336ad851d48a8568fa2249ed8036c7db3856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64682 Malicious code in okta-nasisayur23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016dd0491ca57ce33f3a13511ee4825f0d077ad30e1b2754710da07e97e5d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65977 Malicious code in vida-rangi59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb164e5a524f5d58eb945e62ebcc7b37169924820d674d5f45d62ca88feb106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66485 Malicious code in zaki-serabi46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593f61f0171b7fd4b166c391b37522b66fc72211d84fd90cfcb637dde3a228d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64877 Malicious code in putra-tempe50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a108048c0074338d06c383701c25d848fd7e92fb524223f2c1fc9c2c38f8096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d266564c4cb032f2a3689e294eaecfd27b35ed9c3ab2b7ca64442caee2f1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-gembus59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a680163d77148eae160ad0c65a8d5b69bc190852d73c6efa8714a834defe26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-gorengan65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1135311e3d993831eb9e9ae07ba69dd0b6d2c2deed4dcf1f44d86d812fdf15bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-papeda2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1198738c143dbeabf45b2f2f9509e215655692df7db31ebcd99026a1ecc2bf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rojak9-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a6c4101b6d28cdc4316d7abf1ba6f9f08aaea0ecb2e5936a0a99af5e9a6f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62096 Malicious code in bella-telur68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d697d41c95c340f748a7eefafec3c74964e3767b01cb5cef65c28a518488d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63831 Malicious code in kiki-tahu54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaacd2e99faa18735c51830113871ae7d9a637fdb91abc44f4b0dffecaa69f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66092 Malicious code in wati-tempe91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021c644a7b254b6f1a5d3089b1515a66d87bf20024369dcc288aa427456bc778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63880 Malicious code in kurnia-kentang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2797a0ed61bdab2efc668b6fb64b0d20c1c10f53cc6aeb4d7b6e0e78bd9b228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46322

Name of the Vulnerable Software and Affected Versions Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress versions prior to 1.1.28 Description The Hydra Booking plugin for WordPress is susceptible to unauthorized booking cancellations. This is caused by the use of...

Malicious code in worldwide_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84d9a42f7010d031f3f39dc64eedc85ab887704f3a9450a2427e43d98e22b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4476c6ab97f99ce8b3fcf0d4ec1f008c5034a25559e82ae24e47a5bb0cb48e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2d5f37c8f77d3f9d3892a865d4662cbcfdd850f6b0dab8af57b1034120f0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...