Malicious code in avomainah-fras-ofafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799c1ad4ae1b70b0aea0225d7f5565dd9940cbfd28ef0a1995d25c2bfa1c846b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145853 Malicious code in ophiuchus-yildun-centauri-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef0efd2ab36909c134870761c4a8cc9e6ade31076e09fbccc65c28fef81b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146148 Malicious code in phoebe-dactyl-hydra-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15069d6c517ba07a6ed22a9fc3941b90f3ed7cd9171a1029f4f45dd9c8976e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97674 Malicious code in cockroach_blue-64-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d88ce984e9b31308833bc84a862bf25070a219ac93d4280243e2839b3ef01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tek1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9fccff2781eef88f2fe90ad97de4b974517d86521000e5c96ea3bc63ac92d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-lapis51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a280dabecf462a6a1bedf4c68818a30315cfaad6436c8aed14f622a35d8c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-ubi37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6e187f69a31fc2f731b6af3e790e01d8528fd30288441512b5ebf89156e2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72736 Malicious code in erick-brengkes75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba236b4490badfb2ee6d1da615e036d8e5cbea0005bb22b73b9cf9886e8f77f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MediaWiki 'Language Variants' < 1.19.24, 1.20.x < 1.23.9, 1.24.x < 1.24.2 XSS Vulnerability - Active Check

MediaWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...