MAL-2025-90066 Malicious code in rifqi-esdoger96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda06a5afb62c0ed184a89fa6b5b2cc090aec6c1b49e4ee5ae5b726b5e5eca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83045 Malicious code in agus-kue61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6c99ab53868a3a4f303d7b7637ba84d71e98de2bbb59f2dfae953c939546c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86022 Malicious code in gita-papeda26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e065dd46d076ed83fc8eb635d0e0bda81d03f46e80c5a67815ec83e35f42187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89070 Malicious code in ogi-ketan54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b697072b258efb262c6a489c40abe010051746a53bcda2e34411e461a8029be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83406 Malicious code in bambang-kembang61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef485704eaae8a415b7bda61e22f746a6265c0e4840b6bade03cf598a348d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89553 Malicious code in putra-dodol90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21684c9be736fd45d8ccc5f5da3b4395cf0f838c70eb2aaa5bad3838e7d81b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12637

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in pregnant_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd23ebd8e211b1471c2c3b78ef2409b4cf60b1a0deb391a5fb9dd0148405eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-mieayam85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244b0fcec5d450777372daa069d97f9cda093c21ad6a98bc3be218e4ee605b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-naget2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9257839f59a339a376c98a1ecfbcec9bacb51e28398e2cd55f3cba128a5260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-brengkes29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f664f7bea12e27b2e19c8a3162a4fd6e7d140a803e1f17a21ad10355e3d0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-miebogor13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f4aada89f808812fdba16c9a2687790bb9373c45058cd88069d2cefa7e6bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-peyek80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8f179fa6e6f8f42b76902d48debd1d3cbb38b11f562b8f0bc97ca42b7b7ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11029d85ecd2e8630e0d1186f44944db3a986e2d567921bd870250563c3919b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasicampur97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc343fa168592be540320553f77ffa37b5f1f3d775f7883924deeb9688c65f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tiwul92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef355d3fea7393d1a9845d8a070741fdb0ba891d8ed4295cbcf093cbbbce6aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-martabak43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4264a544205277492001f42bbf8da3e245ac1e78f8d0944f4eb7b0fa1fc5643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brengkes46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b033538cc9dcbce79cdb4555e1f6cc506c5fd7d38826ba4b4f5398f4bfe2189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63c691aabcb77cf0001233ca2471bd32dc01cb85947c32e96ec7f175c2eaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lengko86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9fa755799aeedb1ea799e0e19d9b49a692e0b5a554df5bb9c541d97ee913e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...