Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148209 Malicious code in spinner-semantic-release-nuxtjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa28620704ac1e40b252b62fbe8f07a19da9efed84bbee91a1c72c9e07efe29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-miranda-protractor-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a111ac67a7016d75f014c72b9786ce5661bc1d1508fb5ac8b3dff5ed5eb70e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140268 Malicious code in cache-chariklo-gatsby-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922d2552b4fc45a9980f353493ad012a5579a62b6fea2ec12c4de27f6169c5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141603 Malicious code in despina-ora-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b501de8f1360e66a72f590aaf705c1d3fcaa02d6de0c93e9334b191b2e1b00e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138791 Malicious code in illegal-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c066ddb082d2d7537b82efb71416bae7232d508496aeeb6f936b7e2b9dec935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Simple Downloads List plugin unauthorized data modification vulnerability

WordPress Simple Downloads List plugin is a plugin for managing file downloads that allows users to create and manage file download lists on their website. An unauthorized data modification vulnerability exists in the WordPress Simple Downloads List plugin, which can be exploited by attackers to...

Malicious code in bella-rujak36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eeabf522d5bab21ac5008df6fc7b1093c837b2ae5ce2988685382e3f0ff8a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brongkos50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e3528172020adb8eea09dd7b132c18585223e54b685aa9f4ee54dd5fc0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rujaksoto83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d786cc9ae4e82b360948616090e7d393d09aa6a5d8800a5ef95f808f6c35bda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-gaplek51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60a58546e6652810972b9ea37e74109be80618bc20194263cd358ee3638950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kupang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cfb30cb92b5f87a1826a0ca9cb5f9ef3b468b03727d823eb9396ba76cd9dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gorengan23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a986545645c2f5ad5a750f7e0f400229bdc2e4a3495d474903e457d9e97f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf362960035e9edd43f9dc8dc276e8d2c87371d0fdd04b827b2b441126fe1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134523 Malicious code in jaja-bubursumsum64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fe128101e8d056bbddefbc1a85bee1fde5ffd89333bb197dfac067fdbb06d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b3f153c8aeb20fac848f8e84a28f8365ef875ab725150a01f9f4eda076c94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...