MAL-2025-113689 Malicious code in erick-sambel40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dd8847814366f4347f7bdeeca235b25ae53e6c190ba580d7a96d3b12f69d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114406 Malicious code in hadi-gaplek95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7c92118feacbdf861f2ad3c0fd2d75e920df3de64436bde9bfe6bf08d28ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115150 Malicious code in kiki-klipo93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82e9341956c7d9b0458ebd4f7ab5842be947e4a73afd4bc626be2cb0e5d88cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113864 Malicious code in fajar-mangga83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a2071fef59b937d970396bbba47396151f8c2bee874c303c3b47e3c7315170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Photography versions = 7.7.2...

MAL-2025-112345 Malicious code in splendid_spider_violet-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727143b460a8942297a9aba3f7d1bd4f8a572b6321c264d53b2c92c704c7e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111867 Malicious code in everyday_dog_tan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee528e31da127883216204df5d7970df82aaa58f984df8f895ca11827a6651e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_wildebeest_peach-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5692ce1cb6a0df9b829e12d271d475be53269e62c483fe5e225763da3a2ca95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_salamander_green-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe031da532dc2b177e25cb30beb97756dd0e4be92fe80005b2f30146c562a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112126 Malicious code in nervous_moth_fuchsia-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a2ea0affef9f9bf11e82f10ee6e3c5039a7a63f170b0db91055f5fdcabc800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_moth_crimson-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec77cbfec95aaefdf6932d0848ed4a0dbe938a0793d0c67b1a71bed2a8e4ff4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_manatee_jade-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6192d884b827a6e8338a8433b2b07ec8be8c747b74b45d6fd305f7658786be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_smelt_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef190775f8338418b955a4fb4582ddf4024282e05ab0fa490e24e0ab91166d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112180 Malicious code in peculiar_crocodile_scarlet-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eae2b9c144861654df04ecbcbe1fc6191721c7ff9ce0c8f8de00a9698a24a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112350 Malicious code in spotless_dove_aquamarine-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5649f78ddaae56fb609b7c839bba1a7bc08d28888ae67162ad18bb56560e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...