MAL-2025-120534 Malicious code in hanafi-nasicampur65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d339719936226754283567cb6d1ac8957879d00a674bc493c1327031015ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121006 Malicious code in jaja-rangi96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8903e7fc6bcb05f687aee50d56facf3ea5e7af87ad136d5004167ea548cc93e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119976 Malicious code in familiar_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553bbc0549461f63dd979f43fa24098ce21a72513b5be1433c9a70efda5c2e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123117 Malicious code in sari-lepet18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393bac82c39c19ee0418fc3db6d52c42c08b4546453009911645b4198ffb661a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121489 Malicious code in lina-moci57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4cb9aeb3f5952cafa66ee8c9572fb3d2798a339b8745298e1cea4cd1f92e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118619 Malicious code in adverse_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef8f7a6898664cd600a2dd2eacfa6a3081193014763f32b8e4597c5aec61c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121248 Malicious code in kresna-getuk22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f1c4b918ba06bd64a61653c4baa7592a394114608cdf244bc6b294536b4982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47286

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on i...

Malicious code in developed_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d75cdc0f61d9a568fc49a224c39854c721e6e7d368ca0b1c702fece192ade1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-soto67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb1a8213a0c6f79d09065c86ada5fc70f9b93c2ce270f4974bfa3e8eeb7beb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-tiwul5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7940919b680cf9f941a0bc9875181ff3a9858b866ba3fb923320ceff55de7a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-rawon87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8730e9b89fad76d354dbd0cc8d9172676a68965588300f8049bc047f2a607419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-nasi64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440f5ca26d2f2208d2d4f9b03a766344ae7af531b4b89cf4d0976d209aa7c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-sate44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcc7c250d2f07487b1ae2da407f936ad9bdfe08b26ca77251c7239abaa7a740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gorengan26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564f87f82f75c9110863cbd9cc662b4e785cd61d239fb405db6bbb84f2ba474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rujak28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026cce9a4325579f5a0ff66886223100bf9f915037d9a8f144c29146faa35db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-semur85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e8153e2ec0a11b943e9ad052d64aa803ca1d710cbd4f4770a7e5da1a3ffe53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-semur10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82a7a51aa8b720325f2034a10150e2fee9f67251ac12e23b999fc0fb014fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b5cae6e4ebc2930c6e4878cdd249e0b9168dd6d176eabd7c559bca443fcbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3b380c3e62167b0f0b71b420dc97ce78d927ce6c224caaaebc7a0d4f6d8520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...