MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138583 Malicious code in adverse-green-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c560b296b026efbad260c5adbe13f04e927d1b5190126560c0ff25179ab065c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46580

Name of the Vulnerable Software and Affected Versions Braintree For WooCommerce versions up to and including 3.2.78 Description The Payment Plugins Braintree For WooCommerce plugin for WordPress is susceptible to authorization bypass. This is caused by a missing capability check on the...

Malicious code in noisy_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d37e4318c290859432493c8e63abc538cf7754c289a0998ab054e1d1a9a46fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kepok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a102fa41a5b740e13357b902af3524cbc1bfcfb5b0f2e4bb62468251d07e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-martabak45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165a5cae8bafe4637a7c74a6301d36961eb30520be1f3742339bbd505fb55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-menjes59-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c43694b287452d0f471c7a13cfd19416caa4fbe63d6893aac2b673efa578a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-toge80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a637cbc06db16ad7e0c5282513c6fe60c3ac74bd84d7bbf5c9d75e6d25f50f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ruwet46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af05b0392ad1b84a0358d90a58867c7f193c070fc84fafc8026110617ca8ebe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3134ceb98bf8ed05c462cb28e0fa2f9543a1bf19864bb487bcd88654e1ce624d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gulai32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79cd6424d4153e685c786b829e5bc27887b53dabbdda0318e9e1d16fbaed8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf362960035e9edd43f9dc8dc276e8d2c87371d0fdd04b827b2b441126fe1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136931 Malicious code in sinta-getas76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa80f0635d9c0b52b5534bbdb75ca3cb9efadee0da7f3c2730a3d015ef773ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138403 Malicious code in zain-empal47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f91684585690e5fcb15f92432335e88d503ae273536b9bf90d4168dbf174a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135657 Malicious code in musical_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f409abb320806e77f38412d064f237b144a4fb7e84ccf2f1011dc70ec2934a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132591 Malicious code in competent_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996122074b551d003f4ae780312aa8b69fa116ed2866785630d4311392eb7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-esdoger90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97df0bbd2dc0dfdc9beae68aa92b71424b69a847e0956204e154ce42aa805afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sambel75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b690092a41b94d2855dfcb518e529d4a90bcff6d7bff58ae851e0a18aa403f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-sambel53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd47c5764887a5176dcd6c4356c09bb4f92f6e3f9edb4135cae973723da17f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132217 Malicious code in bayu-mendoan95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d22b513cf220b7f172b9d4b80f829b5a280e915910dd1fbcf6d64ffc50d2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...