MAL-2025-102356 Malicious code in existing_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6e5e94b36b9ab19bacc73b395451e4af182e6094194b12e5bfc8df812f2771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104678 Malicious code in joni-kembang90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80f4a9d0e3d7b18940ba1f6870a736ad271dec1d14dfc807a53e320910648ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103152 Malicious code in gilang-papeda82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6b07110ef7231b6d974a4b443d2065c1dd77042afbe7a32454d0de8b34e227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-sasag79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafd0d8981eaf1e6334b3f569b2e4d8770436500dc8b78fe3b365fa2bf8f97e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101483 Malicious code in dewi-ragi46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f46a58004eb752af90675b5cae4ba1123d1d1c6ab27beb954064617be04dadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105187 Malicious code in lina-tongseng4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ebe6d8c750b087746ec8e62e87490d2c06bd6cc64597be51899c1026ee2221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4496cca838d1a9db6519be8d6d21873b094a28eaa34f0adaf5d390bb333618f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e94c7184a50c7faa364b73fed8caef84f349b4c3921f852d083bab22be653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98799 Malicious code in magic_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf845221046c6a67bdda2ed8ee460c4496288a3203d42979475264f710fe91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98614 Malicious code in alone_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67836b8f8cc1a026068ad3ad5943d9e4e8b7d6dc16252f763a8e2e27827214b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c94be3903bb7b5289fe5baf5196194f125820bb116216178b855ad49af809a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5173512fec3ed1b1fbb3037c9a990e58b1c697bd9dc672b768c548cfaa5c19f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacc82e97e6cdf96325a252991f25adf6d6dc64d628210f587682c204e3260f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98791 Malicious code in light_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2994362e775c799e510f405ee4a4ff3faf62eb4cb2f92c4ee048f52156190c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98795 Malicious code in logical_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d478ec8d22d51234672de71c8c99e88cc230c4914f070f54a8fee91e9b8d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98613 Malicious code in allied_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce964c20d4f279d0668df6c6906f0bf29f4960a3798f11a62778d4b5ba913c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98831 Malicious code in natural_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713b2f9b888a0c87b1e72cdc68b3230ab5d7bb0fc5cc8defb2f2eb536e509a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60929

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in kresna-miemee68-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c74ff0550e8a7504dbc38475b8286558edb5042b2a2f5e1cdec50ad4fdf661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue32-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6da49ead6c6e3a3d0c1c8b74f80242aadf233d5c72c0300a5a70fb43d4cbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...