MAL-2025-176087 Malicious code in miftah-mipta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b020985c9065879070afba41cbbe014f30aeabb022522a51fabdfa050534c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cbac52d56ed591132d52d0db54dab913d689e2c321c662c3be73386ed234c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d561327219ac6911cb32e64dc3e35fdaf8128fab10f547acbce8b795c3e89d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed90ceadf6cc856cdbeb306b136d40a27412e8c48ed0d0b7dffab3fc70d5aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172999 Malicious code in anidta-hauli-mudisali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a741e55406451f7974ce3d46e537940e4aee551a2494354fb4b3fea0109bd9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176799 Malicious code in nuilva-darde-fagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282d31fbc002ccd9ce89ec1c46ac522c0f87afde2fbf5405a3e9afaa043c6019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174998 Malicious code in irfan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eaac6143bf46fb4a5c94e2a5bbe3d3a5dec0bc0d7632f6436a70668e155407f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178548 Malicious code in sahufarf-satidaf-fabasifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbc3361b81127212b7365a465e52681002bafda495f23554aa5b3d0a909435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176498 Malicious code in nokire-tanjiro13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ca5bea346bc3581648d6e6583c40d0ee70bc2ede88e3b0b1991624832e971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175404 Malicious code in kapvino-soni-farsacamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5b2029271db6a8308eebccf1baba93542f2dbaf9ecc6b454ff7ce96d9d6546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-13057 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

MAL-2025-172104 Malicious code in apasih-me-pantekaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2003f0114cd9fdc0e035eb3f28bab044449cf9486291b4a603fda1fb9a32dfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172472 Malicious code in namei-maila-abinaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79768eaac72a043553803c1ae2c2c4daba9fb5d265d6e9c6249ddc8315888a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172216 Malicious code in augis-pod9r-muapilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda6528d75cea870f6189f380584ebfd3ffdc9d7d24e74eb06b1d480d3fdffbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vikassharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce61beaa97ce0ffaeabf2d92c80f76b6f257c937b095c8f1644c99fd8195975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joshuahoward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cce4b043163f50039cd2ef6b1fea715d095a229d5b72e3c54f2a1ce9b774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ateefshaikh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375460ec892febffb550010b8ae5ed22c7067e3ae435152cdbd35b77a50bcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hassanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c474490892dc4e0716e55c261f04d09b4490fb86ccd7668df43a6583243e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...