MAL-2025-85797 Malicious code in galih-teh34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc3aba8e46822b0509672a8b4dac1b52e1417dcc55a7ba69e9936a1d3443d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82833 Malicious code in absolute_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ec8d0490f502251b33ff430e8ed7bc6e7f1d411204f80460fed7bce41fe417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89570 Malicious code in putra-klentik65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d012cfb0276a4dbcc941007ef308f02302a5c93d3d6e97267e98a04b9f81aaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92507 Malicious code in yanti-kue64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0510af9bba006df0f376decf9c3f7b99ba563464203125e3896fef2845b6c644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85487 Malicious code in fast_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5775533f1c2dc1710ba88cce476070725b0fed8e6a06e5b9d53df2122d56e06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

Malicious code in budi-semur28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b27911d2a45ea085ca967cfee7b362576f080da25266507786e93d6496ae116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kue36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ba715e53082e42342804ccbfc6eb4b0d3264cc50c542c6044333f17369e8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714e0f92c3d07c1d1a9ca308aa89ab54ac22f2515d1390a447b5d64baec99e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-buburayam75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b931951cada13bb88c914c4ffa539fa3c33cbbe8a4e1935a1a1979adc0d371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klanting98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954f357088364b7a88cda93aa0ffa29b32ebc579c190090f1748367ee264c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jengkol11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6152aa5b6e98a9fba336b52630f868caaa1fa26fa9ac895bd1c1c37d975a2df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-keripik13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac057617331afea50cf59e19efd8ed6da30e27a06daf0a1108cec55a299cbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8748ee3636a26b6eaa66c2da2394197081ebc3d12d132572b93e6734fef6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mieayam42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120fb56c0a04b0a0b3b5200e9be0d2a49eb3ffc363caee3acf8b1168d5c7520d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lapis58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42dbe91b7f9d413acfbb8f65280434b76d909799cd9cf29f2a957c74f712ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73388d7d40a0f4d2465428b4cfa11802207ffe43c6836b57701a46c3b0c7a8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-rangi40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f551adfd573c5fe7d38fb9a10d64ebb3c11b86227e3dfc83d361b3afa43da65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c9e42b7897735395b2ee62f4ccbed413a1013737c873cbeff70372a49aaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-ubi12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f28bcf061a0c7008c04e3cfb897ffe1daf66c0a57c19ca44debfad1b2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...