Malicious code in nurul-bakso24-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65cbd805bbec953e41d504814d6a28f234ae9c4534e9409535a0b612bca0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sego70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce5bef21d3030ae94155209e8bac96274336c330c95f170215416a8febd5399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-nasiuduk66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7658f9eb66dfe69990de573876d30704cd386d70349d59ad0862eeb66df7b269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108045 Malicious code in riana-tapai8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4749e1837748aaadbec74fcf986340f64bfead440b464f887b6ae1dffa6bfc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107576 Malicious code in qori-kepok48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0b20f7a89820f0c2d880495ed660803ccb0db8e2adfc48c52ca52d97be5ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lodeh42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b95239a76b87d3741401a89d83928e52886e45a4e50bc424034520e3b92b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100208 Malicious code in calm_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064527115524ecd3985cc458482e7c015ac9357acf8f2ce254f10d6957eb63e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106701 Malicious code in oktafian-ruwet29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d59e132a972f728b99e014bba6cd626034b328cd38a93ee1cc4a851db5bd490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111395 Malicious code in yuni-rojak6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852319e0b05aa0699e38f4015ca2d8b9ef3e5bd661953238472e41190e9f38a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104457 Malicious code in iwan-lepet90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2e600c722751ca22620558a5a6c42fa56d8e12e1660b9dee4c67a109d89b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103914 Malicious code in ida-serabi89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03806bb5b6e9b8b966e6c0e904b6b6b7524ff47e736546722be46f9bc7a62107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101537 Malicious code in dian-nasiuduk49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4788923595b7e2a670a482a06eb1031ebe75d871096e69383e8f5aa8c8edd494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104864 Malicious code in kresna-lapis64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca790ea47957f25d6eb897e5d9abcf21135e2994375d9bef739d701c55cce460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99310 Malicious code in agus-mie26-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a19df4f8b262ad120ed2fdb4f19b177a176e1917293c335e6c383769b54c767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98973 Malicious code in troubled_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d4da2d323ce3a552a495bd2dd7870235f49024876c818d331f0aa5090896a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98956 Malicious code in systematic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6a3846c5602492aeec99b4bfbce3316bd67233095c759ec3dde3d6cfb20ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a6080d162f94eed8b21389b11e7f363e05f2552faa7a042c1827e8319af300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98712 Malicious code in exuberant_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7a82d7b5eb22f366cd2159fc7d7d1e683a60781bbb9cca4d1df75d761d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60928

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access a...

Malicious code in iwan-pisang37-puyeng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98ac0053dcab1ba08adfcda23dc3ce45813633164248f279f6ae0aab1ede53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...