MAL-2025-189917 Malicious code in theta-yaml-compress-rain-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8013a642dfebede233931896060c06f35aed6cb508521a5070519d705a68b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12681: Exposure of Sensitive Information to an Unauthorized Actor

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

WordPress Comment Edit Core – Simple Comment Editing plugin <= 3.1.0 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Powpy in WordPress Plugin Comment Edit Core – Simple Comment Editing versions = 3.1.0...

Malicious code in sonic-kaos-fgaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e337b1769da5ede0ace3f87d807d580f6089d7672b6e225e7bd1c86c1a4da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miloipe-apomapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6860927182dac798db7916c4c247956fb7c037c0a36ba449db8766dd2d9cddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidfaf-fbfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505191fedc618015740b324135b1898cfb500db527ddeb29eba3021db7cf8fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173967 Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-laokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d10800685df10441620b53b2722d912e1993157080c39c5721914b11591b02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177955 Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagaggafafh0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75310d9c19826d9b565a5f4a3d96792a119fe74436d3f687a4bcf7e1d9ec04ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8904871b495a9483ae0d914a4ba8af11e1298958028666f40b8ed770f1e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sooi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81d4c406e728118a6d16129fbf9212dc5db5d14e8863f4ce51d698a50f66fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106b59ed9386319739b76fcaa2c70b44e83fd357b90725849b117e99457edd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168270 Malicious code in tealove-darknest15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6974a0529ea89f3f8601a2d9808e78d4acec0308b7731b4c38baf058f2dd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164846 Malicious code in rinto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ef0cc6614f14d93608b2ea2bd39c4a868d069b5c5d9a1ae7fca26f43216cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158508 Malicious code in lookingan-nalako93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041c22202ca8e0d97ee3572cace72fbc77e487d83e2cc16d19c2419dcc687108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-aviun-abupumabavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27674e782d236ac05aaf2b6054fa3015d78872df946b6f12d62d0ba58c5367cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249405a26e7a9971e6ef41ca964f4069d86058f8f926098b748714bc7cfb9e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/guyk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c3ee0d418f7af2f867e220591ee77d064cc06d6e1f08a10289d4f690d209f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169653 Malicious code in ucok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c054cdcb0883996fb2de94a97c1e447a898a4ace5a845d9d89d678a338efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...