MAL-2025-93267 Malicious code in armed_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8383b4c9ffbe518228836b7919469009940369ba9debdc6d767310c3c53cfa8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c82fcdf6f59600a93af1c66d9656dc4bd302e689a0bc0028c49d78e2beb1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0551896f700eb638b16bc00f77015cb2a92731fe7168ce8c76476543ba1bff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93123 Malicious code in added_python_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c49868c59ba40cd35ef69fa8c47d446b831694fbdd9b95c3d2314c7df1a1489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd66f6c46d8e6e138e584fb04608d65ffbef5a9ab62ca720a0985b8dba4d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12931

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

Malicious code in okta-lodeh24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50be676821a60f3bc9aeec130ff91dd18b07a7065c9995d9c4ced7fbe944cfee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92efaf3c2cee92f7c527911e5f4fa0a8758d1467df06ce352b05a2ebee55be2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-rojak99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ca5526be28e6c6aeea223fbad312ae1face9f42689765a5f0aa3426cf89874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a20a9178a74c3d36a8ad854eadba92004f252641501a30d5cd702e60ef359c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue18-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b634c478812df0bd09a7932c265091fe45c336a2cee7b79e4a08ebed6e39154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-keripik33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 357c671acf4fe8c65bb954aaa1e98806aa3e5cc533f7cf3dee2e3c6b5a869028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-serabi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1497c95377793c061cfadcf9486b7e69ab9d5c9b29ed679204550423730c5323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-toge93-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bd657083f6a3f502036bcc0daa9e2c56270167ffbafc4cadd34d7062cd1189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-keripik13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1a941c065b45db2c814cbf15bd671f2845d9819eb1fce7fb150cdf7a59da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getas59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bc9cedc922710b49d4baaee1f1d00d62b4c3a913db3d3f6a89ac58784980f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tempe34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186e75bf31cea7d589c9404bb29e8ce811aa4be42ed95431b9786374801402f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasisayur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b0a870e734a57876f364314039dca17fea14437704606aeb1698e5d462eafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-mendut90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdc288aecf682d291526586b01bcb9b8be9c13c3ff7b0000462ef62e84c732a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-nasiuduk51-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6af050bb5970766dfe09d8173415cc27f91da6790477387919d63a0e533be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...