MAL-2025-175349 Malicious code in kapvino-sogdani-gagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccb647e3fc7a8535fda6a22d59d73d4f6aa6a5ac4d4e0754524d938625e9576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177098 Malicious code in nuyar-adudar-badya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00765f7ab2724112153382b8ba4dac20c399ffba852c90d1be4f63aea50c9815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcff7706c0df7eb5f3e3ae84e63cbdd8a7ded9f547208c15bee3608bf257303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-liabokaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054efbf560a988914435a4e4dfcfc982a3b39f71251a09d75791c68db34cf244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a129d13d53c7211a7249dc7b4017316416cf3dfa0960b38e0ec588a6105ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stavbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629d781d44a643b8c58dc86e83c85a9b44b84564275768d5de0ac6db022f0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-adfadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfb1b19d41e6627ab8a5247979b22146296c326d117baa080b91c248268eeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172827 Malicious code in anak-jalanan-mdn17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b129236f0789e611ff1c984aa4a97f0c78b2733c7940aab35df933557cc0f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173697 Malicious code in butanaih-fafisa-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e917beb5bb54454ee79986fe64d0162bea8f2ce4df88879fb649a7a00eff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178050 Malicious code in polymer-idasifgfa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf59822b9b3974b33fa2dee44d3e503c08fac7385e6c19546e5b02297da5443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-naffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c51ec2a7e2770f928d01122234ba62596bbb106566290a7b5c344ff265f9eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-po9r-muno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084b043ed4486b6295050584b7f5bd0a5c0dc3890a0052562e07d42ca42b360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munafpipoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709615b810990a5d5ac1299d8358c9c4ccec0a283cccaeea5246b25968bfd37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172434 Malicious code in heres-matiula-unuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b430cba67c480d2feb42bbd483d48a62efe5bf1a3741aa3f861fc1c7897b941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170804 Malicious code in ameenmunir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b779f24ccdc717992a3186cdfcaacfef068bbf817b6c6d6668ac896bb0d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marouanefrancois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1884c2bf4143dc79926414c5c40a7293e82e6fc6ea523835d8f445e5135780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

Malicious code in teagood-yakuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847936f560ef58748b9ec9c6420ad8e741cc5952f0df4da8e1eb735ba8b481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...