CVE-2025-52331: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Malicious code in putri-bika14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9004aaccee21934fee12362c3ba8e9a0c6b86c153ae6f5197a971f480d74142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138515 Malicious code in zesty_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba71d65c17f09bd483755a349822375ab78248de3b4c9e9b81262ea343dd4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133611 Malicious code in fundamental_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce4b3c14679aa7753a222e2d7b420081c35680caedc69b83e0808b01d78770b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133155 Malicious code in erick-rangginang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff7cd51f259c429462d09911fa613cd8f04dc3c0e030cae78d53cc5d295fd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2f38472e93b7a8e268de2328d19d2aecd689ca4792742060b6d3f194e6f84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76056375238c15cd2e104a57815c9f4caa7a2941ee74fdb1e2d217b6aa5a0025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi61-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6fcaeebd2d0ed3b4c93ce77c1c56cf87901a8bf64d96899d6f93771ab535fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-semur68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e3bb57c015eec6817a03e8dae881f0d0efb490088c2761a71e469d8b341cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127200 Malicious code in hendra-rawon92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa483a6e733f370e57a95f78689c8fe475b2bfd0ffc4f44374f411da221bfdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125515 Malicious code in citra-sego21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d33f92a983a9acf26b4885041b9c13e1785420bd29972cf50f9888b1a83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487c7acadce833e59256a1ad2b71a9bb8868a6425f7e443a21ea22b6aab32bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130185 Malicious code in sinta-tahu94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ff664e51782405294eaad76448222f8f7f9d1fac94dbebddbcea5e791970d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128791 Malicious code in nadia-saguer33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d28b3e8f4128ed37d1a9e108b3c8ca9fe2b3ddaa90c5b3301bbffb32e66eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sate3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbf323cd104502754bc436e371fa4d0b9012e522189cfa8bbcf92fbe2b7f990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dcfb8c19280e200130e9bb2607b469a4830e0854b6b9f638ef845763d0d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121319 Malicious code in kurnia-pecel72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c658059f2605b66b08361aeb9fa80ce60b9ded3c9022f3647f6b4b25bc4aeb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5358ec5dac882f5697d342a2bbcd5eb1b84b4618a07e181222a9011863d57eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124579 Malicious code in yuni-papeda78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8ed882aa9f2156b5acbca0b21e5f4768e0e8f941822c4bd5b453d39b3c4256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tempe31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099dc43acb01fa7f7b0101a94c127b1d1a3ca422e1a509121a67fdf5636fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...