MAL-2025-147387 Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146553 Malicious code in process-init-ignite-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a7d7a22bee9c6cbc25e4eafaa2b8204550e9878e62c1a1daa58a95ef584e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141488 Malicious code in deimos-aurora-electron-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e10a38bcf028cceb598cc95ab3b984714b62224cdf73e92b6551b32bcfc448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147999 Malicious code in slides-xerxes-neptune-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6827afbc579f426525b828395845f8edde2e9b43a41a713835ca66836730c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146034 Malicious code in pegasus-helios-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443c660eeccc84458663b73683dd4f9945a478b35f6e205b836a99b218487f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138791 Malicious code in illegal-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c066ddb082d2d7537b82efb71416bae7232d508496aeeb6f936b7e2b9dec935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Simple Downloads List plugin unauthorized data modification vulnerability

WordPress Simple Downloads List plugin is a plugin for managing file downloads that allows users to create and manage file download lists on their website. An unauthorized data modification vulnerability exists in the WordPress Simple Downloads List plugin, which can be exploited by attackers to...

Malicious code in arif-gembus72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f76f452fbca59b2bf6554816a557551e48eb367cb63f40792647aec8685921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujak36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eeabf522d5bab21ac5008df6fc7b1093c837b2ae5ce2988685382e3f0ff8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd5436eb180498a4b0f9f2b3b097dc1aa4270970a7964c3382558d8eefd8324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-otak-otak31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea575ff010826b8b32384db796ebae58c09d636166d94f6207885e731df1069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mieayam62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f9d304a47f2acecc34c7ea7d28b9eea86de81d11b525bb7ccb37a20b037cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tahu60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0767df6c6503c11e9871cf9d84830a725dd12b48f1c40135bfbba885529825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-mangut27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e3356d6299d5498a4c42c5fad4d22ced80c0a9a29a0d04355f8c5f20cd57d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sambel85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e711902823ad1378bc1d624f72a69b41f7f7b7b464c4feca9d17ce1ce9f1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brongkos50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e3528172020adb8eea09dd7b132c18585223e54b685aa9f4ee54dd5fc0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-ubi69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d75502d40983e8ddc44bfb78b8261e84918ab0f147cb0e876b0b92cfc67f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...