CVE-2025-12020

The Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible fo...

Malicious code in wawan-kue7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93e97949e646e0e3cd5153cc068ab13f76d652f7a065ba1605caac6a429bead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ragi54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb6d9aea4c6513cc24dca53c91e453d78b09b6d2a3007a0ce084edb6f98282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136535 Malicious code in real_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec53769581afeb00c0dd1bc791abe47c3f0b0ec6473c59b3f8121a0ba47239f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136405 Malicious code in putri-mangut25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecd36d9e3cd0072783e0ea1f74a90b0245a50ca69849e4e5fa7a7693c7c15c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-nasicampur18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1995bcbe1d7ac1055d6c9da488d80e600c403fc6ea2f5f28085776d89b15e9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bakso14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a4524dd560fef1072bfd52ac24c5bcadfc1009fab9151fd0f2ce96a4e2ae45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-esdoger42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285bf40ac5a3844fbca2654322093aeae2be4a075cdd4be9ae276cccfdaa6cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136072 Malicious code in okta-rujak7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4b5288966c870878119a06e6511e04f41397521de4a7b09c3b34e5d32335e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-semur21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e78e28b1f3b4a249f36cc2cf0f7acee9032eecc2d03e4dab49fd5b56791184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137294 Malicious code in tiara-lepet16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe589e648f777fd81cbcb152958f6b5a9b387a50bfe8710417b125946e0d21b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132800 Malicious code in dewi-tomat100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c462245120b2128df4b9985cd0bf274313a03af545cb6a3a2f5a0846aefc489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eee8e2a9349b3601bd76bcd1f0d4cefc376809528d558349448be930fa29231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-ongol-ongol65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8167060a1d7da5e7722318d393ff84ce9d8efe5a765b0c56b14035052a481f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b62841dcb8ea99f25d82ef06f81cd5ae3c318132e833be2174db6321ea4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125811 Malicious code in dewi-saguer46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe3b79ea30be29fdfd8c4363d252d4c4a3f5fca35dd3da32a8d8e0f7734e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lodeh6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6482f28e766330e88b2709d063eb2e9ba92b2f17cfe0a0d0c8ec8f4b5c44ac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130958 Malicious code in vast_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f64f71b4817a58df31aba560c48bf91331dabc000509d2f212258b1e7dbc112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130759 Malicious code in udin-mendoan92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1d7d8e4b509bfb890e07728839a6aaf19d0cf20711a129e877f924ec33e6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tempe57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac82538c0bb5a230dbf4d5254d7d0595a86e05ab6910cfaab56113547327ad87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...