Malicious code in joko-soto9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43510062e3222411b9872271afb21bf0fc6383b80d34c08b2f4a875567dbe1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-enting28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a35c7c57b5cdb05f9239be625e4e123be7c02f7941e78b3fa50554d34063690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-semur83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ea04bea2b404ae4c2d2ad614c8d51049459f678acb266ebcc120a513652caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-tek40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d4dd6f5d64d3f77b64dc39da9b69216f1969069b237658a9f050efc3bbd51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kue13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d592319a8b769675496daad147b43da4682fcbda7271f2b8fed8e22f65ce0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57082 Malicious code in joko-ubi65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5857148346e1ac4c018b792ba929317d175589da812c827dba76e6b1f6cfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57702 Malicious code in nadia-botok74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686e4d9da810c05729094d9a01d2616d11ec63d9385cc4174ad4942bedfb48f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56711 Malicious code in hendra-botok90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177d006ac8bde260a4a75b3cd94c60f3ea3fc27ee1ffe5a25957b3725457cebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55687 Malicious code in coloured_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce19313f17081199d17ace3ce27de8df4bd2b3222d271eb579418501d31a8a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55073 Malicious code in ade-lodeh49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749bf156a037e0e09741cf27c56b0d0e6c9a584de807020b0a0b98f4a94595e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Exploit for CVE-2025-64495

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via...

Malicious code in sinta-soto40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e750c2c84974be765c2ef8c26462f7db1735a34127e54f170858dc14695019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambel62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd8d6296a31441db32bed994843235f0af0e4537bf084c9c5ce6d58cf63bb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-klipo26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490dd28e84e91e8479a7a8abc5dc09762f086ed05916a21ff1d82ae5e9ad1207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-otak-otak3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a94bd4a80ec64db1e208d186a6a2161a0b9b44a5b7a67c68f62adf1db7ef7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-pecel92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3dc7ab45c783e962aba0107015a1fb8188693f2f8745c31c5f7f67dd1077ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54032 Malicious code in oktafian-kacang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf91ea204b1ff3fd59ad98e571397c7d33743727be13a67fb61439c5a7b86a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54020 Malicious code in oktafian-gaplek2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980df3264997dfe327b26ce3da451b014ab3407bb8b188f4fe3e6d5f2bd23f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-dodol53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101303096ea35f89e0f8918daf73f0a044ef0a4129c9687b6314ed4dd7d0f240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kacang40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0774c036c28688e973ee54164116090ed83b72b644978d71da04fc483f9c67b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...