Malicious code in citra-bakwan8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c474ca81582ab7e3602dd5eff480030c9ad78e4a188966a2207ed2b7109c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-liwet60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec866afccbf69d40c7db75613741a453e0d75e3d6e70edc4fad3f5b216facdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77802 Malicious code in eka-taiwan13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487f909c47d68729cf231c51c00628ff2026b3c9ec343454730f073f3927857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81130 Malicious code in rina-wajit82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632b52eebd12f4e178bb43da80901bb70e683a33cc2b8c4fb857c22131645ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-liwet34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb276a4e5f121ed19884f454bb2c13fdc3381f4ef63d4d99a82e7bdd99700ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f09a04702f899fdbcf46339d5ff73760bdb2e09787360e9bfc42ec1d43b496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73416 Malicious code in hendra-tek36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114f1f135eb2e9a11eac0e5f67edff0c460ef6c3dddf981f50be40bcb82774ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakso68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0286f379728bb964c0872868fdd5535759aa8f99570b96b3d04667d930253a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress The Total Book Project plugin <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation vulnerability

Insecure Direct Object Reference to Authenticated Contributor+ Book Manipulation vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin The Total Book Project versions = 1.0...

Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c264ff8352ce4a661f0c8f9b9ac0965f65b8f0684ede6f87f2054d510a91eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f63ec33e4ff5bb8c1808b2e220c91a5d78c70ed8de16834cf769bb3ca2ba4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69655 Malicious code in nuclear-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9345a1b82d349dd5e2bacb59921d53bfbad93fc7ffdfeb6fa67a7db7b0025d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69488 Malicious code in motionless-yellow-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94108fba18e6667c74440fffb0f5ba5dd334ca97bdcbff02fa64eec5bb4818d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ketoprak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255c2a8d655b9605a00d646f77c9920fe3c1137a815a7719219179f4f3eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d62009528fb75339c28394b8f2b2a4a6e83a48924adcd46ff3e881b0fb93fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ac2f82d1b30e5e15dc099532caf5ee4cbc6c3898e2dfd6e2d614f1061e9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63822 Malicious code in kiki-rangi94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d01be446ea5eb21ac1a7241e80495fd35eddb1ec07f55d3163e4f5ed42ff3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...