Malicious code in yuni-bakso68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0286f379728bb964c0872868fdd5535759aa8f99570b96b3d04667d930253a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress The Total Book Project plugin <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation vulnerability

Insecure Direct Object Reference to Authenticated Contributor+ Book Manipulation vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin The Total Book Project versions = 1.0...

Malicious code in shared-chocolate-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f63ec33e4ff5bb8c1808b2e220c91a5d78c70ed8de16834cf769bb3ca2ba4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69488 Malicious code in motionless-yellow-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94108fba18e6667c74440fffb0f5ba5dd334ca97bdcbff02fa64eec5bb4818d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c264ff8352ce4a661f0c8f9b9ac0965f65b8f0684ede6f87f2054d510a91eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69655 Malicious code in nuclear-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9345a1b82d349dd5e2bacb59921d53bfbad93fc7ffdfeb6fa67a7db7b0025d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ketoprak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255c2a8d655b9605a00d646f77c9920fe3c1137a815a7719219179f4f3eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62074 Malicious code in bella-kue47-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de5bff48025076c2be6bf947c6a69bae137f514d12e51ca2b099dad5edcbf3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d62009528fb75339c28394b8f2b2a4a6e83a48924adcd46ff3e881b0fb93fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ac2f82d1b30e5e15dc099532caf5ee4cbc6c3898e2dfd6e2d614f1061e9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63822 Malicious code in kiki-rangi94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d01be446ea5eb21ac1a7241e80495fd35eddb1ec07f55d3163e4f5ed42ff3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61161 Malicious code in related_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b3537e6787790d0253a157521910deba3161f6aa1590774ba0f04cb0b4b188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61328 Malicious code in special_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba3f8fefeaf99585765c0a329b5fd961784851a6bbacbc72d8a728820b266da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bubursumsum25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf883af95195fd621be272b4318449654d8d60b142334fddcdaed4222def4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sego50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fbda22f2006e9ab7138c0aef27d07e10b29557fa874b1787cf3c4c8c9b1246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58148 Malicious code in peculiar_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2bd83c027a07258c652cd28a318bda61bbd9cdcceaa23aab518c5ffbeca1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59280 Malicious code in vida-gaplek46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b28bde7a0bfc833e082ca142a274478dd93647ae1e19eefc5a50b5d1ec35ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...