MAL-2025-86943 Malicious code in jaja-brengkes93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78922b3f9a676e6e4ef3389c34e2ced2e0e901e084b99406ca97720f61800f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92728 Malicious code in yuni-otak-otak18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f2224f87db1d72326bf1feee63769bf3dea4e4ad86afb9a56e24e837b6d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91730 Malicious code in vera-rujak89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b5cfd02627d9e5ed91f519482c6c8111da253e6343e4f485f9929b046c6b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84777 Malicious code in dono-sambel62-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce176150278d5573c51ab3001870a480f84ad785d2da9d71254f704a8d9329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91644 Malicious code in utomo-tahu70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0b1608510f16734c4213cfc5029c29bf0a14f62948e8e22b99fd388ff90da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91211 Malicious code in tomi-tongseng98-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19db0297cbb7216f79c75c11940e9267a3abf885d9c98972e9531639dbc48179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86928 Malicious code in iwan-takokak40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6eadf6b2f61292596b3dda5041e9dafcf5e56ff38d22804cc274577614dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rujak4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ee661f8d591da5a9e5f25f5c154c4664152d7720fc66804197e1cfe7e7dcc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90049 Malicious code in rich_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f060f17506dda0d949ac832533da0751e25913b8754d965a0b6d80c00b2e1fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12020

The Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible fo...

Malicious code in social_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53682ca611c3dba97fff5aacb9fc8ca200bdfab47b2b62f0a7fd36153822af48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keripik88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154694f304f00e319095f41d6b5fff18814922e795f3f6d4aa59df34e456e858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80317 Malicious code in nurul-kentang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0022247872e7ecb7025b552cccd1e385cc4d4046d878a5e61d3ad176ee368375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rendang26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b8cb3f0e8f6b7377c32bc7930cc535861ca5762fd3d9bab7c9d39e5584413a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80752 Malicious code in putri-gaplek45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7bc8d8e207a12926853e52f2d39108f606f011162d889e5c70c921686f76c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-ketan84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9e80625c76bae3dc15e8d4180f480ad44a0926e3e6f39782924282f3110a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa7aa0dd165e0f46dbbccb8933962a2c6c86227943f86a3c0582e5e1b97f825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a57e925b3bf85e9f8ef3d28681ad0d84ebe7e6a630eeea214deac139a1cac9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76785 Malicious code in agus-sate93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031dc65617456afe2d33c6bcd9bd01d58363c96d447f4c4ae68d9a02a87a01db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82025 Malicious code in vast_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7cd5fcb5b75166167bb4323c4417c0c9315e86741fa61707c3d9db916c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...