Malicious code in grep-fire-throw-web-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf7689d3d15f023a0d962a1dc51e8ad684feb14bbc8cc9a82f6b8716822f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150358

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

PT-2025-46834

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-13076

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

Malicious code in lomi-ifush-ugikfobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c59755f297706751f06ce305a4d58f1833838102248274ef959b514a3e2f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6e6123a645caf59e7fface4348da44fbaa41fed9627d4bdeb283124d759fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185046 Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183084 Malicious code in item-at-labiozkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab643c0de6a871c0567172d77c86766839f1c6c6cc949fc9cecc08a36be5c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183689 Malicious code in manu-oi-gisoag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc0c5aa891c11a484208db8efd96d65e4793acfa80281f4998a530502ee5c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-13063

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected...

CVE-2025-13063 DinukaNavaratna Dee Store authorization

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected...

Malicious code in teate-thy-sonic-ceri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fcaefb281ee571a4b373b11a883416a1b08c617d0fcf17b5fa5c8f119cf5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180425 Malicious code in teate-thy-sonic-gifwo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc63dafbe83bfd5de6f4d51798e574f4e35fcdaee1875e96d3e1763b87c1eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iuvac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038b6255cfca633b1decfa4bcfaa95ac9223336fefc12962d82109669c107401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa1b31794dfa1f9b5c2d9f05bca05c699627687e511d2edc24c31679f215fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4827508504f9f2dd01cc0e877ea1aa8546523352c9f3c86350299e9d66cd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8584f7f71b9a5c5e500facfccd9c495c7c8af8838a015c3b31453536e0a85d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd62a6295ce794735ae8e4f4d5134ae3331333d89c1b2ab11a6df8fd867d171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159279 Malicious code in man-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63246ddcdb49f3d790708ef98c75f8b2f5c8b425127551a31faecf69a8d3f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...