MAL-2025-54707 Malicious code in rina-nasi99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57946f8f76333d68561b3bf87de266a7c4b99631c9c5a971f0d1f44b3a093361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-tahu25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc20eb136834580b87ed9be5d02029476c3aad3eb7cb7eadd91c1e64f043719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53130 Malicious code in kresna-lapis16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8434d83764a4ed4d035055f6c4be5d03f93ada6d152c24be884a43d0325a8e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mieayam5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7523bab9d6b4aa7a5cd5817c900ef9bd7a7f5c7ede37fb684e387c46535b3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tempe32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9a9a69fdab1566eccfc53f327b132c17a55741a1d41b38c124ca30483be0 The package tiara-tempe32-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2024-25975 Arbitrary File Overwrite

The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is...