MAL-2025-77088 Malicious code in bold_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d7e22b9590f3bd79c7540e2394b81de6de82939c9ee6e929598a5ea13de66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82632 Malicious code in yuni-nasi89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3418342f349bd2c58d3d30f38b0be6176971554f46695b95e8592a922f726f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78093 Malicious code in fajar-gandul67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba322cfcfac7a4bfdc260054d751d07aba735bc588e84e4c1707e21e9b16e1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79732 Malicious code in little_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97475f46c50465723a16e550d41ddba7815c656da5a73882f2859b6bf35a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78583 Malicious code in hadi-kentang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67420c437f5fa428bb053f1f39775b70361faf79ec0f13b2c718037daf5410b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79955 Malicious code in maya-keripik68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f03128c31ca10d6b651dad0e5bedcc829188be0ccd52907aa3714b568122ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81468 Malicious code in statistical_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557579dc021404e16027dd0673ac7a6a1780d596155706d40055d7d807ca0d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81672 Malicious code in tiara-soto60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802ceb500cb5852b0cda8637372f77a7193c1e10d741b3c9cc33985bfc43a28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80989 Malicious code in riana-lapis89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945f232706b4ea6732613e5f01571fcb5e3fd8a9687978738876fb84fdf93d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81789 Malicious code in tuti-rawon58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca8c107dc78e396805c324b036c12f884a6a3ae5e3e9a2721dc29caf6ad10ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

EUVD-2025-60981

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in yuni-telurtahu46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8bf1271956adfdc0c388ffe8decd476b6b5f497716cc04e6ec809c0614f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-sambel59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40583bdd8f4492eec3a5bbcf5661c2b97e30a868faada49b2981757576b26bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kolak92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8a88e51e431ccb323ef82bf023f527cd03a1781a34083f9b835af031fb81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-toge10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c97d29a30c71895cfa0de8ebf4034d572a79028d0c26e5ea0168f20b4bbd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-lapis99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669e7e20df0572b4ad05650b373ed1629f1d5bff0558bd54c3cae0a447b40273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-klanting66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb75750e10230a515f30020bae5ed37454146957883d47b6a0e8db9f2d8cf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-keripik64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc9d17ab69532643ecd2ee40deb6c741065351127f6e342ca4b0920ec8ee6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...