MAL-2025-178412 Malicious code in sahnim-sati-anjifangaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada91e8be789ff1a473821536fc1f57880fc91e0083811b8c7fe43c6f511a00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177492 Malicious code in poglymer-ognagh-amifagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21940f1bd552f6276659975b66db617245664bfdfb8a4318f92cfb32827a8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daujhiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe292d79796983b76219c950d9957ca0f11dc6a5420ac969b9c70af0bc7c03c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173388 Malicious code in buta-fbna-goafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817543764a82fee68074c9e6bdbd7711d64c97b8fc362e93ceb961432b3cd16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172766 Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175292 Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174765 Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178340 Malicious code in rrramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab5acf0077ceb9071bdcb2f366394909c6700c9d61cfbeaa7809330a5fd8b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177640 Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-manafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df68cfbb246776c668fba48113a09d2848cc5fc266ba021d54449dd9188cfd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172065 Malicious code in apasih-leda-puakimsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ceb52a81d983250e8c6efeb6f165be9c82af086940dec8043b0d0f14d855d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

UBUNTU-CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

MAL-2025-156643 Malicious code in inufgi-gota-jamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2290e77f0b677e85ff72ea7401cf01ad6fa41a56cb1db3089a7484b21b054318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiafala-magolollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43498bbe80c459f548108e280167fcfe8c2dea624d15b3386951fab6672e903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150009 Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170561 Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156095 Malicious code in ilal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cd6543a1f33a5383b893d056b7cefdee956d61e94a9e6dfed421c29459b0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d054dc6a1bc4540f5641dbc88c59c17d3181bf1c2c989204f6211163db77e2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilope-aranogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b748b95441c49a3d1e999656ef1ef2df6ced277efa7150b59f2e045530d08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...