MAL-2025-138643 Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-lime-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a0d2ce3084630b8aaaaa2ccee23d64366e300c6bde289088f5d116c6e2e395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138846 Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138618 Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138935 Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-rose-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e118a10f0c55599ccf3867367e6398ed8a5180b40ecf9cc833d04ba1d4f7d592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Angel Theme <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Angel Type Theme Vulnerable versions = 3.2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2025-10295 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 731931b06fd6 Credits WordFence Required privilege...

Malicious code in lutfi-papeda62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cc8d3afcf6abdfa119892e141aa2307e62089f5df77719f4bdfb95f2377413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-ketan14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad1c2f77254db9ce62d6bc4c6aeff110c8d1c0c035ab6a70163425d47ab8cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-getuk1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e75c01d1ae2bbb2750a6af0ec8b3d59c2e4e78dfec7725272ae9565d7abaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138373 Malicious code in yuni-saguer30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5857879d322b25f47ba164805490e4f88892cf3e15d1be76b1c08edeaf62f5f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138440 Malicious code in zain-sasag72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f74b01c642ae530bd1e5f3a9ced026c0f69bd5c062aed0c9c70beca13583d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133600 Malicious code in frightened_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f40ba2c1bd93e2fb171fbc74f5ce4e03d4640e9f16602f39dfae193803fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134453 Malicious code in iwan-bakwan7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92d0dc80a7cb9b53ee6e5310818a507e918bfed8314d32ba8750edb2cdea4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ketoprak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129c48d34b400981ec84efe94d62b11e14b4ab514a9cbcf00646d135a6291f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kupang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd499d282947312d3697e6399edfbdddac7d5b137f3c9d42c07c319e3ff8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-teh60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5807f867b43a1d0d8a39b454cc2a324799070c1d0c6975266234955018f791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-wajit79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7774a1a900c99bc34344e26a7959865fb19c6ef55c9a1cfdda40618f88e1186e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...