MAL-2025-64119 Malicious code in lutfi-dradag40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9e6c7ec7f65d49868389bab0e2916d37a3c25a2a4743273cc2845ae0f5b908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-jamblang24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd37dddfc408abc33064266437b87c302e021c7169fe0aa51f4a6980d90d8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64001 Malicious code in lina-bakwan7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b825610e7a932e1a834933c3eacd67565460df04e4a0fce0916eeacc6b0de6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64451 Malicious code in nana-kue15-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477d949ad1e8d906e7984ceac53a64cf59bbf3db6bb6b53e732f2a41c29e2dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Cross-site Scripting (XSS)

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to Cross-site Scripting XSS via the validateurl function. An attacker can execute arbitrary JavaScript code in the context of another user by injecting a malicious...

Malicious code in specified_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4df4365620f9e0d959266e313d536e78c314f8febbc908fb98dd3a34aaa0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d5e50189af55f09cbfb71bef0f4d17f7b87dcd8c718823ecc8a7294671a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robust_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a15720b4709d6276afc5d73b01b2bbd51363b42fe44028e0ebfa5f77af2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8d1f6005d15e44aa6ac513f086af177506a3d7d11ef7a6fddd1226e01d14c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970043b79695cbf846ecf478459a43563574549828fb11ea2b1b85579f1a6c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b56fd3b5c36aea95d17da328d5e51f51e464bf9c764ca78ca924b93774e42e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e04820744aadb2b43adb4c03c7204052fbf0dbf0ea61781c76ff6ed01f5ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcbfa85005f6940d5173f61fdd49ea6240d2d132cf4e980f04f624f6fb298c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb038d8021fe613b2d421fa98501377286b3b9684e57850259ab4680f6d451be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61452 Malicious code in tense_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edcbd8795bb5d7a809ca5af849d993b757ef3a868a7c3883b57bcabd1f034e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61096 Malicious code in proposed_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e597134b96022c4dd3637e47c0655e6c45e3c87e10751a43b0f4125cb6986d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60160 Malicious code in conservative_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7050df5a3adafe2c844942b1a68b92873a8c7a24bff1332a2af034cfecd139ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60597 Malicious code in high_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9be0e1e7ee682b3851825c85c092165d2927b3164fdd33e1435af8ed1f3815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61433 Malicious code in sweet_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b344155c5e121337e19c7648cd8d5c762df9af850fb2c49686ff38b7b9331197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60272 Malicious code in difficult_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753ca5ff5122953cb095efca35a46ebeba65658b9e971f4a8835f48b77b262a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...