Malicious code in indonesian-province (RubyGems)

--- Credit: OpenSSF source...

PT-2026-45107

Name of the Vulnerable Software and Affected Versions eNdonesia Portal version 8.7 Description Multiple SQL injection flaws allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod.php' endpoint. The issue exists within the publisher, diskusi,...

indo-cpanel-exploit

🦉 Indo cPanel Exploit Toolkit ⚠️ FOR AUTHORIZED SECURITY TE...

Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks

A previously unknown threat actor has been observed targeting government and military entities in Southeast Asia, alongside a smaller cluster of managed service providers MSPs and hosting providers in the Philippines, Laos, Canada, South Africa, and the U.S., by exploiting the recently disclosed...

FBI Atlanta and Indonesian National Police Take Down W3LLSTORE Phishing Marketplace

FBI Atlanta and Indonesian National Police dismantle W3LLSTORE phishing market linked to $20M fraud, seizing domains and detaining developer...

Malicious code in nodemon-meissa-outercore-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2e23c45539583f659e07b8c25c6f64355c7809af168ed58fe5b4b1e9e94297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-gemini-prettier-plugin-markdown-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aba293435e865cd16c68eb54bf9bd32c3825988f2434b623b6794b0e0ff74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189816 Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187775 Malicious code in library-biosignature-bionics-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188095 Malicious code in mock-xml-omicron-protected-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7271cc8995f244cf518a70e253f1be45a9e93bebd2159cddc6f52d3a7264fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-juno-cors-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8097a0705bf1ad76bb1607942f6aa70d99247cce4d60a546977d03b5d6d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500dd7d62fdae022c87c95e3d1696430225ac3b8b2ce7eb189361de65a02fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-zenobia-mechatronics-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a302ded4491038396a7065140b8b3fd0cb60afdd87d680b8a4d45bbf1a26e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daemon-container-rain-route-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f1f147013c5221da2228438178465ed4a4ee42d1b44fbea669e51ffe08947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189743 Malicious code in superagent-singularity-singularitarianism-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbdaa1d54bbc61f1ea74857628bad1ed29b040508630d98c1a955535b5c8217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188254 Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleobotany-commitlint-config-angular-ultra-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03612e35e536ee1ee10dcdb5d77fc03f05899841dcbee643769e07617aa5f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186742 Malicious code in encrypt-bundle-test-deploy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcaefcbdd1ffb8c51e8f0e7b02fe563dd40e979c5d81f3dc6babebe9775f54bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-kaus-non-blocking-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-vortex-nebula-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb509f13958f7a7b72ce609e2825f1e19061e7b2d65cce6416a6e965c065359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...