MAL-2025-50291 Malicious code in eko-asinan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90baf9d532b55efc5c8c3071ca145bddea0bb3d2c84e93c1c3d8f63c66888c8d The package eko-asinan71-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51699 Malicious code in eko-tempe58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e68c8afede7239aebf486de68ae5d51dc7c3e61f466768cd3da7e12b69ee6b0 The package eko-tempe58-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50542 Malicious code in tomi-lengko48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf3b10e76aae5e184d7e4d3f28a3d8f308f4c38a76de7fd012e99c11b2ec62a The package tomi-lengko48-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51583 Malicious code in dono-bubur27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407a00d5f231298b76f5016a36ec9e5750ad34679f4bb46069593cfff405464 The package dono-bubur27-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51230 Malicious code in candra-peyek38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cbf3227928fdb65f4c5973b5124e5871655d53614496ff409e4c8c82191432 The package candra-peyek38-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-52713 Malicious code in wibowo-brengkes97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240c2f54e1c93c701bf7539c85dedb48e9b2a3cdf29cada2ec494e08d7258eb6 The package wibowo-brengkes97-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51734 Malicious code in erick-tahu85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d3cca47b247ece35e2676a8e6a0fd265832847e0cf4e912822ed46780e61c2 The package erick-tahu85-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51211 Malicious code in candra-mendoan59-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5db82ac7f6006bbb11a409d7f3f413dd39dc22426ff15015227565ec4b1e1c The package candra-mendoan59-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51778 Malicious code in fadhil-bubursumsum20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6008bf80b7c8db2a2b2ad40e8371596d62e1e8e4979171e088f75de46c6775cf The package fadhil-bubursumsum20-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51469 Malicious code in dewanto-bubursumsum32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eba1191e32843a5a410bb3f639664208bad67314ae24aac013d5f420698641b The package dewanto-bubursumsum32-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign tha...

MAL-2025-50191 Malicious code in dewanto-miemee46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa62629e019fc2eade61ec24c6b06d7a784ad8fac631b4281e242deb0c38f3b The package dewanto-miemee46-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52499 Malicious code in tuti-ongol-ongol46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ddb5fe2a927aaa548d3bb5cabeba5b918bc06de2901e2482313c1b79ca5953 The package tuti-ongol-ongol46-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52733 Malicious code in wibowo-ronde7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06602ab9e5c697df17599a5f147271a073ef5406ebbcfa312ff946dcf2179643 The package wibowo-ronde7-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51497 Malicious code in dewanto-peyek52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11232512f3a11f213e30345785f41f2bd5174519de55a5af81695ab88719970 The package dewanto-peyek52-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50264 Malicious code in dono-rojak7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454fee6be057f56c73ee1c195195a9528ae470d958fdf106fe3050fd08c732f7 The package dono-rojak7-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50039 Malicious code in cici-gaplek45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1147230464709e74e617c329d76b57e83712d9af0f66efe0a16138e8dc962305 The package cici-gaplek45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51241 Malicious code in candra-sasag90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75658d1353efb8e7697851b7a8f59b1f181a482a9ba3bb2af25455161c9b04c3 The package candra-sasag90-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

WordPress YouSayToo Auto-Publishing Plugin 1.0 - Cross Site Scripting

WordPress YouSayToo Auto-Publishing plugin's "submit" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacke...

WordPress Plugin YouSayToo auto-publishing 1.0 - submit Cross-Site Scripting

WordPress Plugin YouSayToo auto-publishing 1.0 - submit Cross-Site Scripting source: https://www.securityfocus.com/bid/51649/info YouSayToo auto-publishing for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Plugin YouSayToo auto-publishing 1.0 - 'submit' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51649/info YouSayToo auto-publishing for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...