MAL-2025-175448 Malicious code in kapvino-sovni-fffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd36e405b2d5b2a67207f357e9190bc75476062b95f7404f6b5cab8eae95d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152798 Malicious code in arif-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0237109a06378a93a0d1c36129bc7a4449a7ca66e7972acd3abbbc913a9d187b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164674 Malicious code in rino-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476444cdd5a63ec92769bd6ba2eefd9070ee1c7728174e1f0c2e1d83af63420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-webdriver-mocha-hyperion-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68132720276fc1b8b24564e55a9b95066777fe576c7d605049235c96d36911c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146751 Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147528 Malicious code in rollup-plugin-yonder-draco-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882dd9b292283f0e6f159f85b76503f46a224aac7d185a399da12e6e783d5865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-mangut96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d14da2c69bda8f7e82ed54ab155994056f0f3f70b7329379e04ab3497381e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128807 Malicious code in nana-bubursumsum32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418f6ed5a0c2407b87a503e1c4bf46df84b468cd881c41fe88afeb3b6ed9df91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kupang56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c45312608fd4238e05cb598eeaadd53cffb3fb74b904112401e2a041c5f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115422 Malicious code in light_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58851fa3a782692e0bce8413ad4a754ef457c15e7608e891950f7008ca21859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mie75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfc422b3f4e9c98ec351c4fd9dc2c7efda2ee8ae58165a7c6e4047e00609a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80247 Malicious code in nina-empal23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e286d632a357f28c821a4ddb871b0256a16e0c9cc66d1ff0ab2dbb84d754d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65970 Malicious code in vida-nasipecel89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb705ca79c8da642cd7c48611839f34810ad7afb324ab7acd81aa6b04cbb9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-taiwan30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcb5f6fdd7238ae2976bd6d7ba077acfe59f6ddaa468605ed3f45a48c8b8d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-martabak66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5de8b091b5b050f1d58a1b5e806c109645430ae787ad9e6670c10116ab6b7f The package citra-martabak66-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50926 Malicious code in bambang-tek76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bd1991edc2f5ea21fd18d4841c08090ab0ce8f706329626af6e8c7d930c70a The package bambang-tek76-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in candra-nasi9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488998cc57b63052b215fd4621aefb8911bd0e5e64513664ed33fe7bded9ad43 The package candra-nasi9-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-11209

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

WordPress Depicter plugin cross-site request forgery vulnerability

WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...