MAL-2025-70930 Malicious code in successful-red-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad096b59b7d074fe4600e5c013a271dc5d7725fb62d063f5e3d23ae00a5473f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68972 Malicious code in intimate-blue-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41229cad2f31760972ff92023aa21fac08fccefc3b0cb45f85a6d40dba1e017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69967 Malicious code in precise-aquamarine-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c950221c428cb238fb48fa047f1bdd600d20f54b13c555e3374573003ac7343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-tomat25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8995a5638dd7aa5e2e2bb81e2257fb8678aa0042da833a7fb429ada95c5b7333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65892 Malicious code in vera-klipo77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d0fb611f728e64f94b6433b9ab3c7a9c79cd2f34264e073ee5308bf1239a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7cb11747775be58ec67aed04a9e4f2c1c25ddc84142f35968b6119a827170f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61198 Malicious code in retail_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25842972e2038d9de46c182b683869d70661ce543d2e2014545853f2d1cb16b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-miebogor84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e7074667a9514850435ef6d66654eb2cc18018ef7ba5e6f58ea1ea91fe35e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tongseng88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae2cfd6202c29136829663818e1c147acf4361113fb66e516077543dfd5e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-klentik36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ad7404229b697e36b5187bf9167978699a91b191253d700c2a5c4fdadc778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ronde46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f89a0325dcf6792552bfce869d957a825710d7011cf4aaaa9e5a21a1f8e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54333 Malicious code in putri-klentik78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be870767ce889a43d77781561b52718e934ab506685e7a33c533266c824cd328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-semur40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7a63b97d367203235722339f96ebcfc1946d799b5465178dc1cd81e98eca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50641 Malicious code in vera-sasag92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c31afbf352a55c3c920519a592712c73d3fac2bdd56387da4977af7da4b51b9 The package vera-sasag92-sumpek was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

repub-print.com Cross Site Scripting vulnerability OBB-3770280

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

repub-print.com Cross Site Scripting vulnerability OBB-3516816

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...