MAL-2025-183183 Malicious code in kidt-avog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a0c4b70f30432aee1f167454174cfd8b776581addd06401f8aa0e438ad545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaknuiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c02efc7d2dc42ed44c1290e68c4fcc9c091cee910c6d8a13c29cc02f1e2587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181634 Malicious code in astam-ifst-digoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd76e1570a2318c9d790fb164705193a0ccee0bb9a7957c668907d024981c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182226 Malicious code in gociy-ung-ugauadsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec83d9b8ec067658d52a6dfee9a6153316afab3b1d5f387c0e5dcf4e3ed319f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182145 Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184114 Malicious code in mlokok-lofeaki-akgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825819bc05d8778459bf49e40137304f104c86407534bbb8e4a0e00e45071e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185047 Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181360 Malicious code in ayang94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526b8cc355aa5a76af16f288e12aa69a2885d2142ce9e4e86173bae78ef78b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080fcaf23e42f08af458ef67362f8045a7558a0108f55462d566924f82294f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-narot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62622847878a5b7687d01d1c183021a7ac81e490644c020a41c6791cbed41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181044 Malicious code in teate-thy-sonic-vemza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5a4b6eaa90f8f6fdd8d18dbad2e17e602258aad97966157c9f642380dfa43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nafiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01789f759f45d53a06dfa8ad5eec9e85399237eeffe79f08525ff24e972eff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180329 Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180056 Malicious code in teate-thy-py-ebwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699587931c26c20e57d0bb1a5446a4bcfb1e96310e3163cb20495b51b963a224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-008

The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...

Malicious code in kupaio-ukutila-jokiloa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97178f18e2d81f8bef561f109fca48a0758823bd7ae836236f104ec56c0ea8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d201c468a753fbc959ab49f6b2eb97755ae6ca93b4560e05eea0344df241e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...