Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-mysql-graphql-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-gridsome-element-ui-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c20c00873f0846656bfb575f9cf5070536122c19c16838c3f7df51f7fd37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144757 Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-europa-halley-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de3316b78b1b3497cd85456c92a3f1faa8d33e4f1db4ae920316ec0965c5dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143025 Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569720695da2349549e200d3557858a4c5638b7ab11fa2c1782e3b7fc1ce2bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138583 Malicious code in adverse-green-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c560b296b026efbad260c5adbe13f04e927d1b5190126560c0ff25179ab065c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46580

Name of the Vulnerable Software and Affected Versions Braintree For WooCommerce versions up to and including 3.2.78 Description The Payment Plugins Braintree For WooCommerce plugin for WordPress is susceptible to authorization bypass. This is caused by a missing capability check on the...

Malicious code in udin-menjes59-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c43694b287452d0f471c7a13cfd19416caa4fbe63d6893aac2b673efa578a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d37e4318c290859432493c8e63abc538cf7754c289a0998ab054e1d1a9a46fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kepok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a102fa41a5b740e13357b902af3524cbc1bfcfb5b0f2e4bb62468251d07e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gulai32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79cd6424d4153e685c786b829e5bc27887b53dabbdda0318e9e1d16fbaed8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-martabak45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165a5cae8bafe4637a7c74a6301d36961eb30520be1f3742339bbd505fb55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-toge80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a637cbc06db16ad7e0c5282513c6fe60c3ac74bd84d7bbf5c9d75e6d25f50f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf362960035e9edd43f9dc8dc276e8d2c87371d0fdd04b827b2b441126fe1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ruwet46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af05b0392ad1b84a0358d90a58867c7f193c070fc84fafc8026110617ca8ebe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3134ceb98bf8ed05c462cb28e0fa2f9543a1bf19864bb487bcd88654e1ce624d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...