MAL-2025-181360 Malicious code in ayang94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526b8cc355aa5a76af16f288e12aa69a2885d2142ce9e4e86173bae78ef78b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avuffib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b080fcaf23e42f08af458ef67362f8045a7558a0108f55462d566924f82294f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180329 Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180056 Malicious code in teate-thy-py-ebwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699587931c26c20e57d0bb1a5446a4bcfb1e96310e3163cb20495b51b963a224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-narot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62622847878a5b7687d01d1c183021a7ac81e490644c020a41c6791cbed41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nafiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01789f759f45d53a06dfa8ad5eec9e85399237eeffe79f08525ff24e972eff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181044 Malicious code in teate-thy-sonic-vemza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5a4b6eaa90f8f6fdd8d18dbad2e17e602258aad97966157c9f642380dfa43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DRUPAL-CORE-2025-008

The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...

Malicious code in kupaio-ukutila-jokiloa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97178f18e2d81f8bef561f109fca48a0758823bd7ae836236f104ec56c0ea8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e621a2e33d1e733111b7742e8ce0614b4c76b7325f813af24d2e50d6f0d6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-halaodi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0bdc3e7243acaa060ee6f0d4803eb26c90b786f72a2fc7322de2c07bb2cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d201c468a753fbc959ab49f6b2eb97755ae6ca93b4560e05eea0344df241e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042063ed57dce686e136faff4190225dabd8d6c0e993a5d5b9ca410ce036782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauahur-sofi-dsh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f149a0098a187057343fe0d2d607aa6ceb70d1c672b7b97976dc3a074f45a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0053ed690fd0db23c2c26ad8cf28d2e9a3244af8f5a1b619c50707554f5e85c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-sdesaasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bd046a579cf5d289e104ecc82e834bfd8e6cc8f721c76a72d0a3e59437647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02450090952336efeb3741bf889e4d6a101db58ba06670f2f81394116fcd076f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175705 Malicious code in kupaio-kil-kaoakoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b0d03dda4a41d93e0d2d585f6b973b659956880f743b00c5c73931cbe3df0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...