MAL-2025-103914 Malicious code in ida-serabi89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03806bb5b6e9b8b966e6c0e904b6b6b7524ff47e736546722be46f9bc7a62107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104457 Malicious code in iwan-lepet90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2e600c722751ca22620558a5a6c42fa56d8e12e1660b9dee4c67a109d89b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106701 Malicious code in oktafian-ruwet29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d59e132a972f728b99e014bba6cd626034b328cd38a93ee1cc4a851db5bd490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101537 Malicious code in dian-nasiuduk49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4788923595b7e2a670a482a06eb1031ebe75d871096e69383e8f5aa8c8edd494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98973 Malicious code in troubled_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d4da2d323ce3a552a495bd2dd7870235f49024876c818d331f0aa5090896a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98956 Malicious code in systematic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6a3846c5602492aeec99b4bfbce3316bd67233095c759ec3dde3d6cfb20ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98712 Malicious code in exuberant_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7a82d7b5eb22f366cd2159fc7d7d1e683a60781bbb9cca4d1df75d761d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a6080d162f94eed8b21389b11e7f363e05f2552faa7a042c1827e8319af300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60928

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access a...

Malicious code in iwan-pisang37-puyeng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98ac0053dcab1ba08adfcda23dc3ce45813633164248f279f6ae0aab1ede53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-sroto45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e7aae3835a767b476a5bb1c12b3244274c9cc4b98e6640a1a87b2126c92b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98332 Malicious code in sari-klanting39-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516ac18437a1fbe13870d8e83a8b96909f885696f7ef3cde0cc9bbf50ac1793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97979 Malicious code in joko-ongol-ongol64-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e9b367595247fd41e31e696e272da0dce5c421b886615d5f33bef0b7c23c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang37-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c933aeee3e3f462fbe77af21a88af7782fbe53d6233454af4d5e12456a43e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97869 Malicious code in hadi-mieayam5-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc005bff092263682629973930c80bc3aac279ab9b7b5777f2f277b63854172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97583 Malicious code in andi-tahu75-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ed60959fc6548f807d847ace19402acec6d3d7487fc9ab44ceff67e3ba4ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98437 Malicious code in udin-otak-otak1-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa600830c6c235e3087f12e38c93981c9a054040d532f08f982abd10767c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98584 Malicious code in zaki-teh14-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ee1ebe94b87b04153f1d04a819a70013efede88c15b572bbb6c2cc7c416d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933798e2b2e4a45eaa79b073567a7679dd7ac8b4843a389d1664a21eb6c923dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd8715f39604a76c3d8f262424ffe102e528db174c837dd6e6c580eb2764629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...