Malicious code in wrong_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad7cade6ea87c9c54b509e1a5cb1cabc5a42ab5b24b2c5e4f88e10f5eaf29d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d564644cccfec09d7ce8f28d59df75d221a8cc8cb4392505fd7966e58337aa20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59de491b4759521953331ca70efa3cc4bb183365f6c59e237a7cee6729056a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94606 Malicious code in free_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006550accfade7a5d031a33da0bf37e1b55b65176afa477582b7a1d0feccaae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a062523da3fb2d9553312f3573e6c395302c954afa63593951b489d9690b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-oblok11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942653017494744c5d5449a0aa2f226d62af7c2b3bc09d034aa237782b4c831d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4545f08f175ed7cab0aa85d457de5ea1129d095408429f0beb5ae074c1ad5572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasisayur85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9e0d8c7877cdb632102f893d8d98899d397fc038b1ad7219a1dec944ecc8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc5b95dada54ab4f7d28689287c03b91d75b0ed052cac5c9cc41278f653e8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ed61758eaecb6ad32d84f40a5455f2d9e053f897ddeff2870820a3b46fa9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-serimuka56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091894fd680c2c91e6983f41a7f94a5fc892e6d6409fa0c91200890dc611be46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad037e3d35341e5ef714f48b0d91683cc2278d410bf6798176a09f1332a31c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84420 Malicious code in dewanto-nasipecel12-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a18f48686043640f9853adc327ec3aa6a7d79a481d19967ef2e7c2662d17bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86760 Malicious code in irma-bakwan43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b83263f63024203b118e624059cb3c41d9508653edb973dcaa81b703cb26b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5894c22939d28327987a382d831cb1edd0e61d47e1be74e20146847578c2e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujak75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41de65bf41f0b2927fea2c21441e413cd45ae63fd43cb9aee41b3c9cf89f220e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-moci40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfa3cfba71c60770617a6f544b91bb1fcc670925e483af2ed9d070c586d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ffe72567b14efaa73febda22060d5825b909384996c2c6581105a10e60a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87175 Malicious code in joko-tahu77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80ae053ac858d3bfc6bcc101070650b6980f384c1e81bf3396687102657dd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11451

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aalajaxunitloading' RST API endpoint. This makes it possible for unauthenticated attackers to read the content...