MAL-2025-172786 Malicious code in alvino-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc00502944ae22bb63e8d72bd3463622f10c46d601ff3ad6089da5372c1077c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174396 Malicious code in goodafiun-nuiya-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b75b566b8c5a7f655e711df0c2fa25c2735a23f997077fd2b742123e8c9e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175788 Malicious code in kupaio-ukutoila-jokilokluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0fec56eacabd214e9cfeda363f4e86d34f86a3234046bcdafeb7955448c2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175748 Malicious code in kupaio-kulaa-jokiohakakimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410d021ecc167ec3eb7bcb5d907008adb9e4ed5c8fe1dd3b32155e326efad3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178664 Malicious code in sgoodain-sanu-nuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19449a929a10b93620292ad4667de9e865351b7ffde066e23c5611dc1b23cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178072 Malicious code in polymer-igb-agaigada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1abcb277e882aed394a5caf983960d205884042341a5efc2e5dcfce8efbc621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175251 Malicious code in kapvino-socvni-favi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e3598f6191dd2a7d81c2dc922a650b3a8ac7fb99e020bb6dc413ad50ac04d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176670 Malicious code in nuilva-bavaim-madiacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961b665c9b3659dedda00216c15ba2c268e255cd3c5bd77da663df45e03fe33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-60646

A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

Malicious code in augis-lepaod-gulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbca726111589bf664c0beeb1efc26976493d648f6accb0bc980a51cde2426ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uinani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c8eff1e474153e8888b3e908433547274b0f3a47a769118bb84ef25c3b5ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namesi-maivla-aiubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4df234415c7da88fff136fda482639311563406d5645c2d0edc39edfd3571f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f02ad38697cd673544ca7f694586c335514cb142c56463d9dd703c3c499229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fgosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a19c92caf8b41e26903469c0b24126c445e6a5c619cd1926e76372f98359c2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172340 Malicious code in guide-maia-ubalimanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4fe6e4b2cea25a5aceec17ea01c1b2d0c76e6325a4ae40b25a48673d325019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172587 Malicious code in verts-otimo-nagfiogaaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7608e6c6dd4704710ed272d54c2ef24b77ef218723e34fc8b154c3659d4b4da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172136 Malicious code in aps-leadang-maan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb79a24d74206bfd1a80a90a3e14d719b5b23fbcd03215db35a80fe8f59ac49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munapipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d7f12ecb514d1cdb1386bd1df992e2a4b8dd542f89b604e2d42361f3445e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...