MAL-2025-92214 Malicious code in wibowo-gandul71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c10359fba45935bdbf95dc5d5f33a8499dcd5626f0c9c141bd582d977197b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kacang21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8cce7b1fea11463b2f5fa7544aee24520fed3949c39ba183bb94b5e3bdd6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-nasipecel2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05510b2a9bca1d104bbff6f3214d416a715a12b6084c0211a1c5a8a269389ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gorengan54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff5cbe63bda2a252f2a0724b23800330dfed8881c0e00a5cd46126e6b3a2820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sego62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a1d7418f3340cea687beb23b3d1231c79f2c4007e1db1a903cf7abf10e5641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83798 Malicious code in candra-enting31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72b7c76e0092215982600e4ea868361f35430efdd25b624cc99f650b16a2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12637

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in vera-menjes63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b02069824790ea7fae3ce08cc8f5da6e3dfe408cf9477a376e5883b8365249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tiwul92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef355d3fea7393d1a9845d8a070741fdb0ba891d8ed4295cbcf093cbbbce6aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-klipo47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb82aebe8a1a372fe7aa3d7f55df7f5cbd5d82917e167e75fd470e2eb283b1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-brengkes29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f664f7bea12e27b2e19c8a3162a4fd6e7d140a803e1f17a21ad10355e3d0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-martabak43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4264a544205277492001f42bbf8da3e245ac1e78f8d0944f4eb7b0fa1fc5643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mangga77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d1084f78d448fdd5ff126e85faf12b76b25024342eeb895c6aff6cab0417ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-enting63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb39e9dc04244ac29ee35a7777c1c38e83f848d984167df1531fb0d7197501e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-pisang21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097147489e9fa1a93404255cc8e72801246f717ee473252caf3f60298cbbc864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lengko86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9fa755799aeedb1ea799e0e19d9b49a692e0b5a554df5bb9c541d97ee913e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e489dd8700a9c55467f9a150413f3ebb5f63888815decdd1ca8997af82dce2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tumis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2ef98ddb775c02bbcef6955e65d8f6f7b6086b4d9faad4aca60eb1b41081b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81204 Malicious code in rudi-tongseng51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9caf99fda60da8ff707aebb6f5e8f5603451512d2c4aeecb88b90d053d556ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82637 Malicious code in yuni-rawon47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2675fa795912097930a67d0a53d1414d44bdf5bcc0e54821141167cbda678389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...