MAL-2025-77313 Malicious code in circular_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2150e30532f744ca62d1b9c526fdb405ea9a3391cf3c1f5dd79ab0a03b616d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79011 Malicious code in irma-empal19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a83a56e1e9f04f0684bce54782a783596bcdb649e799981c2504736e0af9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78200 Malicious code in feminist_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ac9abdcceba57e027c6200cdcbd6026110cf45e985d914bfd2e55cf589b633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81468 Malicious code in statistical_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557579dc021404e16027dd0673ac7a6a1780d596155706d40055d7d807ca0d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81789 Malicious code in tuti-rawon58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca8c107dc78e396805c324b036c12f884a6a3ae5e3e9a2721dc29caf6ad10ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77269 Malicious code in cici-teh63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655e79134765904795348038b476b4c5d8ec9b28389ed0725ac152522fe4a78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

EUVD-2025-60981

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in vina-kolak92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8a88e51e431ccb323ef82bf023f527cd03a1781a34083f9b835af031fb81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-telurtahu46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8bf1271956adfdc0c388ffe8decd476b6b5f497716cc04e6ec809c0614f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-sambel59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40583bdd8f4492eec3a5bbcf5661c2b97e30a868faada49b2981757576b26bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72727 Malicious code in eko-tahutek69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7212be458ee9a5e69b7e9a330d22355de5323b10acb316a0b2207791da8a4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74118 Malicious code in lina-enting75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36fb89acf523a533fd2c0a9818cde21881cd183038453c45a7483b66734718c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74841 Malicious code in oktafian-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386191d6e8cd1e0747344299f543de6621107b909f4c065d948608bef9dc10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76074 Malicious code in vina-lumpur29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcb4c7d02a44e164ba949ca8041cec41701957bf60c28a85ad6426630d3ac0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76196 Malicious code in wawan-nasi76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893cb752d2634a53a34f50a882154299eb6d50409dd45a679399e5b8e01d8694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72018 Malicious code in arif-tongseng56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf58341f6e10a4d7dbe353221e102637d8356abeaf34cf4cce66aa65a232ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74463 Malicious code in mulyono-kupat58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f136e8e1d73a4dbf19890a50f93f6eb1a1246fd688126f39af9f4ee6e295a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serabi67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8995964f34ba2e3bcae548d4597dd309a9f249f82892079928a3fa2f03f05a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...