MAL-2025-90066 Malicious code in rifqi-esdoger96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda06a5afb62c0ed184a89fa6b5b2cc090aec6c1b49e4ee5ae5b726b5e5eca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86457 Malicious code in hendra-wajit59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b7bf8dea069d3db8cd58c6af2567ee2138ffb73bbe7d4e2d4321b81ede1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83722 Malicious code in budi-keraktelor38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65ca57f48721dc6f9b4d1a6e4b82cf081722931a958fd1997e0567fbbaf5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88410 Malicious code in medical_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14941040aea32c87ba23e86f3cc18e9d8f39bfae44e5abcae93ca961c3fda2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89553 Malicious code in putra-dodol90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21684c9be736fd45d8ccc5f5da3b4395cf0f838c70eb2aaa5bad3838e7d81b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89070 Malicious code in ogi-ketan54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b697072b258efb262c6a489c40abe010051746a53bcda2e34411e461a8029be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86022 Malicious code in gita-papeda26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e065dd46d076ed83fc8eb635d0e0bda81d03f46e80c5a67815ec83e35f42187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92214 Malicious code in wibowo-gandul71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c10359fba45935bdbf95dc5d5f33a8499dcd5626f0c9c141bd582d977197b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89612 Malicious code in putra-taiwan74-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d07a74122f86096c8d8e78c9df2c3c6656c73e1a5c76e054db9fcd4ad42481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84798 Malicious code in dono-ubi79-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583845d65f72bca4eef5071846b0e9318d49b9440410a55281b5e886011ab7f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85283 Malicious code in excess_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6396b173a376c3b145178ba65e2b792f7956da458f51c1364b87165711585c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89314 Malicious code in open_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a356e1dde5945b365ac19dd6663168feaac6fe293fc5fdeb5da85cf33f098b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87754 Malicious code in laila-telurtahu36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034efddbc776e471e5f9d0f9df017e5d09fc14af5b3f9ee4699b748f3e2e454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89718 Malicious code in putri-miebogor11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e168aa2b64bc70e530df5d6bc564150481270b74076628df1c63fe60517fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90870 Malicious code in surya-oblok43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b6f27b9cf4ed4fed58ea20ca642361485422e63a996a8d5e9c114a334190d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87102 Malicious code in joko-lengko40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90a5103bfb14ffe5ce0aadce15d65c354a0edeb3c6aa2af73fd3fefbebf9334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83406 Malicious code in bambang-kembang61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef485704eaae8a415b7bda61e22f746a6265c0e4840b6bade03cf598a348d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84480 Malicious code in dewi-jamblang91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dae2f5d1a9620ecd6f40d180c7a45c2f57eb33ec0efa8a1190dd9d902a9282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90577 Malicious code in sinta-rujak48-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902bffb0a304af38b9d9f7be5ef8f23465162ab48702bde59250287769611f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12637

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...