Malicious code in @akunsansan0/batu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ef860a595e2bcc8403080b8dc9a468bb4d036f2d1fc7f4cc7c1517db6b1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159805 Malicious code in mansila-thfla-magahazfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730040fad1cf28e4ed9ec40e8e4afaab5e86203565d57d32ebfa7d60b2053dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-publish-socketio-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbee8924bf1b70d758011a04f96cb868c676ec29a65a31ddcbf9d973396b57f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131792 Malicious code in zaki-tomat34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88097618b0d8784e935ebcd5680fe87289a2159ae777c2efb490a2b13730e2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121124 Malicious code in joko-toge6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600b97fbac57003b710b907d46984e04c759130ecaccf755db8a1ffed5df3777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sambel29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e5e7e61c5820959abbe3ac76c6b158e6d7a72f79b18cbffee3072177e230ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kacang49-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fd0fe31415b17b4984fe1448c93db960583b834ad1a985a4c10d97981aecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress 插件跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress...