MAL-2025-115150 Malicious code in kiki-klipo93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82e9341956c7d9b0458ebd4f7ab5842be947e4a73afd4bc626be2cb0e5d88cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113145 Malicious code in citra-tiwul87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e127135d5a2a163129740f76e784bf30392eb87577388a5365fff315caaea6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113474 Malicious code in dono-rujaksoto59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86294f6b2ba0c2a49cbb58d1558dbceea527d1d86f176ab5f172c08253198957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Photography versions = 7.7.2...

MAL-2025-111867 Malicious code in everyday_dog_tan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee528e31da127883216204df5d7970df82aaa58f984df8f895ca11827a6651e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112345 Malicious code in splendid_spider_violet-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727143b460a8942297a9aba3f7d1bd4f8a572b6321c264d53b2c92c704c7e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_wildebeest_peach-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5692ce1cb6a0df9b829e12d271d475be53269e62c483fe5e225763da3a2ca95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_salamander_green-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe031da532dc2b177e25cb30beb97756dd0e4be92fe80005b2f30146c562a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112126 Malicious code in nervous_moth_fuchsia-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a2ea0affef9f9bf11e82f10ee6e3c5039a7a63f170b0db91055f5fdcabc800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_moth_crimson-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec77cbfec95aaefdf6932d0848ed4a0dbe938a0793d0c67b1a71bed2a8e4ff4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_smelt_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef190775f8338418b955a4fb4582ddf4024282e05ab0fa490e24e0ab91166d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_manatee_jade-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6192d884b827a6e8338a8433b2b07ec8be8c747b74b45d6fd305f7658786be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112350 Malicious code in spotless_dove_aquamarine-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5649f78ddaae56fb609b7c839bba1a7bc08d28888ae67162ad18bb56560e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112180 Malicious code in peculiar_crocodile_scarlet-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eae2b9c144861654df04ecbcbe1fc6191721c7ff9ce0c8f8de00a9698a24a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_herring-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73405c5005ddfa6f04d40d14071f1cd1ec745e720278dafb9989da4c34a2021f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd19692da83ab2dcf3697f77581556f3b006fc3e84380c453329f736de819f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...