MAL-2025-189917 Malicious code in theta-yaml-compress-rain-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8013a642dfebede233931896060c06f35aed6cb508521a5070519d705a68b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Comment Edit Core – Simple Comment Editing plugin <= 3.1.0 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Powpy in WordPress Plugin Comment Edit Core – Simple Comment Editing versions = 3.1.0...

Malicious code in sonic-kaos-fgaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e337b1769da5ede0ace3f87d807d580f6089d7672b6e225e7bd1c86c1a4da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miloipe-apomapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6860927182dac798db7916c4c247956fb7c037c0a36ba449db8766dd2d9cddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidfaf-fbfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505191fedc618015740b324135b1898cfb500db527ddeb29eba3021db7cf8fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173967 Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-laokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d10800685df10441620b53b2722d912e1993157080c39c5721914b11591b02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177955 Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagaggafafh0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75310d9c19826d9b565a5f4a3d96792a119fe74436d3f687a4bcf7e1d9ec04ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106b59ed9386319739b76fcaa2c70b44e83fd357b90725849b117e99457edd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sooi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81d4c406e728118a6d16129fbf9212dc5db5d14e8863f4ce51d698a50f66fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8904871b495a9483ae0d914a4ba8af11e1298958028666f40b8ed770f1e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158508 Malicious code in lookingan-nalako93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041c22202ca8e0d97ee3572cace72fbc77e487d83e2cc16d19c2419dcc687108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168270 Malicious code in tealove-darknest15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6974a0529ea89f3f8601a2d9808e78d4acec0308b7731b4c38baf058f2dd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164846 Malicious code in rinto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ef0cc6614f14d93608b2ea2bd39c4a868d069b5c5d9a1ae7fca26f43216cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249405a26e7a9971e6ef41ca964f4069d86058f8f926098b748714bc7cfb9e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/guyk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c3ee0d418f7af2f867e220591ee77d064cc06d6e1f08a10289d4f690d209f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-aviun-abupumabavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27674e782d236ac05aaf2b6054fa3015d78872df946b6f12d62d0ba58c5367cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169653 Malicious code in ucok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c054cdcb0883996fb2de94a97c1e447a898a4ace5a845d9d89d678a338efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163317 Malicious code in nokire-rara3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b487bd94eec53c23572dae0000f0be3d8f8d4814f2879c7f58353eedbdc07ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...