MAL-2025-52830 Malicious code in hadianto-dodol99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8186fa554c1f00ccb8381486a52ade5d2c67e64fa04b2a25fbe7c8e50b2056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52774 Malicious code in gita-ongol-ongol41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7c4a7b55843ff1bc7ce518d3c1fee665d6bbeeed7cd0ad752ad46baddb69f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53143 Malicious code in kurnia-bakso23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49f50acf81fa7319092f8cf6ffe84d31572105e919132f4944fc59fadc6bd7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lepet92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a4be2df77285342ded22ddffb169d7de6b14ff7425f1d364fb157f62d7ebb2 The package cindy-lepet92-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in umi-naget43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10aedd0adf9538d466cc4c741bde55a74971b53173edd98ee22cd5172047933 The package umi-naget43-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51094 Malicious code in bella-tomat19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c46f1be309ce6eedac3c8127ae711856202c2ebfbefa3f6be18f0efab35584 The package bella-tomat19-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51371 Malicious code in cindy-peyek100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d9d7b25ae57d2bb5a3f9ae3cb4ce577de617c1a27effd176283dc931fa663c The package cindy-peyek100-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51774 Malicious code in fadhil-asinan84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d021714533e34e5c45fb58124ce2d32b1ae46589ce8bae431c69512515f23a26 The package fadhil-asinan84-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in utomo-otak-otak96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c477171e6207125066d946b8da2028b02180c6975e58f36a717c82ee7d06ee22 The package utomo-otak-otak96-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tiara-dradag45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6428aa4e0baeaac01ef50d38362d265e20bee7cf2db7a1bc5935dbf49c5f09bf The package tiara-dradag45-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51177 Malicious code in candra-empal72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd139ca8e4ffff0a5d97377ece479139d3513afc0eeac5703c01342b6936815 The package candra-empal72-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51880 Malicious code in fauzi-serimuka49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e89d26c33d5c625c76981a9ca13025d7df17462e9db480e155c74388b9ef2a The package fauzi-serimuka49-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52711 Malicious code in wawan-tumis24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec40bb39b159f0b888c37b7476976b51aa2c226d3af8adbd980047247415d0d The package wawan-tumis24-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50725 Malicious code in wibowo-tek50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616004f9edfa22b912925dd78384fa7c1617c000dd7073fff2afa21ef4147830 The package wibowo-tek50-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fitri-brengkes28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eed2b9a5325b6dfe94758219657f82ff5f58ec095ba78bd4757917b1de68d8c The package fitri-brengkes28-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eko-dradag77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac878aad647588995b930e0d855aef0cc2e1a2f0ae8c5b06682af5f355bd337b The package eko-dradag77-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in umi-lutis77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6a1fc1b61c21a458f00f277040c54c790c8a54f1e12832302855e22790231b The package umi-lutis77-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51758 Malicious code in erwin-martabak26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f7e2a89a7e24af322e53c1449721cc05032eda6bed7e05162802ac71aeed3a The package erwin-martabak26-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50290 Malicious code in eka-tomat2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556b719983ccdfe7571b9d57f06cf9e9af0e941d1fbacf44b6f1356bd3b87192 The package eka-tomat2-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-12452

The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged...