MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133725 Malicious code in gilang-nasicampur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84c6d28a572c9bcbe2452d7e0ef29a322e28cfea89a244a7af83a07e595daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0cd8f9d0f8afc02e047496b771fbad245c43c8d1b0435e14ce89b0686664eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kue5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4ee63ed77029d526e490e27a91ef1972a5c02c083c9f1d24e37ad6cbba3d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118660 Malicious code in agus-rawon61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed5f1cc4145464960e4e1f73e6efd2eb207f5d295184c84ac58fa9681cf8197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121231 Malicious code in kiki-tapai9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb4bf4a58d0cbf385414124e3da6797adb5d476747b7682eb5c52a9fdd9cc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kupang19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c82a6e6472b6ef4ac3c6e42aec90e548bac7e7280ef09b44523a4bbd5f90557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE-SU-2025:3681-1 Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.3 released 2025-10-13 includes fixes to the crypto/x509 package. bsc1244485 CVE-2025-58187 go75861 crypto/x509: TLS validation fails for FQDNs with trailing dot go75777 spec: Go1.25 spec should be dated closer to actual release date Furthe...

Malicious code in hanafi-ubi95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c0ed06ae3f2fb72056d6b5f34da2433ba37915a54253084e7aa6287aac5363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sambalado26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c5b689bb013dbc8002b6831e680f4163dafb42cadd13fdfe4974cf7025b594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111969 Malicious code in helpful_horse_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d0f75ad45c0484e249c3fece91a6c797baabca501015d737c02060eda2c4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-ikan31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb945f19e235168c5084f44b085d1c8b02c786c6ade7cffc9da04844ea288f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95571 Malicious code in mysterious_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f83c265101f8581a321eec996c4db5d2876606b88a0abda637aaa6f2b94bcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95958 Malicious code in powerful_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1735174d5b9f628d6803c267d196476bce24dfcbb84804bd72dd5ff9fd0dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95915 Malicious code in pleasant_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d275d9230160db8f8882a9901e0773dd737bf940f9f364cdc582d0befe08319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-tiwul30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89446830b3bd2a920b9c64a5110c915595f8ac681a3f62e8baff1552b0e28e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86783 Malicious code in irma-keripik35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b393fcd9924686e77ddff2586e4f579b8dca659131e01f217e3ae94411fca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87769 Malicious code in legal_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3219d3210c1d009482f9eaea402272b083fc8e39daf09756f94a1ce351d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11821

The Woocommerce – Products By Custom Tax plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wooproductscustomtax' shortcode in all versions up to, and including, 2.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes...