MAL-2025-178078 Malicious code in polymer-nuatapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96d3cfd22dad173237e55ee282588b4a5cca5ea2d8d42711bb840cce95f1d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-005

Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not. This can lead to legitimate requests...

Malicious code in augis-pod9r-nutiyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98a1cf6075b5bb4158d3d701bb45b3a9f9cd0a336fd057543ecda0afdf8d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-matan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde8b1e89bb6db9374e81bc53f6a6d872ea5d3f202021e8acdb8b309051dd3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leadang-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da764cce69b96ff92d871b1762356c4021be947813df35334b2d08cfa55470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-ogagonai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a0f2212afb037db0e878aa6e4c9cb26771cbf60a5552408b2730bad2feec1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932ba2abacd9014e7ac94824c132b8ef33c01f926ae3e8260217c71f8cca3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maia-ubnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34963c6094fa94241db711c5540c9e3e05ac6f339b8a02bc8d23ef52d32e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maia-unannu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dce492a1a43b5a366e15000f0944c4e262482472acbd37a665ecb464dd6ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-gulsafaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3189435da604d655ab948154bd8dc83e58ddb2dffce0adaff50adb350ba9c92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-nutisafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d368a3864bd4fc6369881fc715cdb9b9fce5dba51073c789adc776725ce2182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-gulsafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b749abf701764eee27235c22ee6b7f4aa525b317df15ed661f1e8932afc591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-podr-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d118c9678b53d5b69d584ea15f36fe98497b0e3be79b7387c59dfe365ee40b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-matila-unu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe41aafc7e23fe53db160b05fd91646c6a4d0192a2d656bf3416918b38848b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2eb836723c59d77948c5217891c4691bc7d0faa90e46250d91397cc1cd6b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maniac-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2967c258dc0cf353ca63319a5505e4bad5c3250842b13ca72365586f95e35290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiagfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36fe4e7b85f845cd8febcb213286c9eea88642543f7400dd0a554e7692724dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff189433bb129458817ec98d5083fe4f197aacfbcab4e211b6c31ee81ad5b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-naofpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3309fc5da1daa43e7f9b8fe35ee19a39bf6d05dafd6b756b126d2c0409907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-osaisisac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe8cabf83b8ad599d6ce24365095489d111e11725ba642ba22e52b7056b663c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...