MAL-2025-138643 Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139043 Malicious code in stiff-brown-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3ae85ff263a468b58321cab55d214982761da6ae5fe69c7f6f8139b4e61d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138755 Malicious code in glorious-pink-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca66cba7a49e0510546cf9b5ea945ee6b4d7739adb038423cc8b23b1e01c981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-lime-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a0d2ce3084630b8aaaaa2ccee23d64366e300c6bde289088f5d116c6e2e395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138935 Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138618 Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138846 Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-rose-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e118a10f0c55599ccf3867367e6398ed8a5180b40ecf9cc833d04ba1d4f7d592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Angel Theme <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Angel Type Theme Vulnerable versions = 3.2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2025-10295 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 731931b06fd6 Credits WordFence Required privilege...

Malicious code in lutfi-papeda62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cc8d3afcf6abdfa119892e141aa2307e62089f5df77719f4bdfb95f2377413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-ketan14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad1c2f77254db9ce62d6bc4c6aeff110c8d1c0c035ab6a70163425d47ab8cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-getuk1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e75c01d1ae2bbb2750a6af0ec8b3d59c2e4e78dfec7725272ae9565d7abaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ketoprak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129c48d34b400981ec84efe94d62b11e14b4ab514a9cbcf00646d135a6291f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rangi22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16bb118b49cf84600e1baf647b796f1afaff329a42b1841d6ab36bb242b9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kupang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd499d282947312d3697e6399edfbdddac7d5b137f3c9d42c07c319e3ff8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-dodol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f2bb29caccd3861136e0e6f3ecfe5ad88ac6ca5d60d139bafc6aa252877510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-teh60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5807f867b43a1d0d8a39b454cc2a324799070c1d0c6975266234955018f791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...