Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138791 Malicious code in illegal-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c066ddb082d2d7537b82efb71416bae7232d508496aeeb6f936b7e2b9dec935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Simple Downloads List plugin unauthorized data modification vulnerability

WordPress Simple Downloads List plugin is a plugin for managing file downloads that allows users to create and manage file download lists on their website. An unauthorized data modification vulnerability exists in the WordPress Simple Downloads List plugin, which can be exploited by attackers to...

Malicious code in arif-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b3f153c8aeb20fac848f8e84a28f8365ef875ab725150a01f9f4eda076c94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brongkos50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e3528172020adb8eea09dd7b132c18585223e54b685aa9f4ee54dd5fc0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rujaksoto83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d786cc9ae4e82b360948616090e7d393d09aa6a5d8800a5ef95f808f6c35bda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138246 Malicious code in yanti-lodeh56-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a75e231a9914a4591355f5a32fcd650b255064640ed00962260b3f5b2085e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137315 Malicious code in tiara-ruwet6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526802fa15e31bbb9b3f643c9b6f31a9a8d738ee0a0cda8989cb790df485e5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gorengan23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a986545645c2f5ad5a750f7e0f400229bdc2e4a3495d474903e457d9e97f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujak36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eeabf522d5bab21ac5008df6fc7b1093c837b2ae5ce2988685382e3f0ff8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kupang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cfb30cb92b5f87a1826a0ca9cb5f9ef3b468b03727d823eb9396ba76cd9dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-gaplek51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60a58546e6652810972b9ea37e74109be80618bc20194263cd358ee3638950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf362960035e9edd43f9dc8dc276e8d2c87371d0fdd04b827b2b441126fe1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136724 Malicious code in rina-rawon60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84bf9b01f086890c8b613f929aab3fcf0529673e00b978bc285b7e06ca4bcad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134523 Malicious code in jaja-bubursumsum64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fe128101e8d056bbddefbc1a85bee1fde5ffd89333bb197dfac067fdbb06d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gembus72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f76f452fbca59b2bf6554816a557551e48eb367cb63f40792647aec8685921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-bakwan54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19ce10687cecc975519ffcd4924f66178f268d6c505226ac28811c01c64d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-otak-otak31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea575ff010826b8b32384db796ebae58c09d636166d94f6207885e731df1069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...