MAL-2025-83798 Malicious code in candra-enting31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72b7c76e0092215982600e4ea868361f35430efdd25b624cc99f650b16a2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12637

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

Malicious code in hendra-tumis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2ef98ddb775c02bbcef6955e65d8f6f7b6086b4d9faad4aca60eb1b41081b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76771 Malicious code in agus-kripik47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f6185d8ce7802e64132ae6ac38dd4d9c3bbd68a9290393fae4903e10ef2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76769 Malicious code in agus-klipo2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12657d97824ac5363a9e44cd762b52ee3d9836a15f7c24fba0da8cf3adf2016c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-rangi98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84a8f8e6bbf7ff156fb058d659c7998dd3e366bd303c8f596f97fa67005da74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79454 Malicious code in kurnia-moci6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87275f65d568b1626b3bfb3665c81af197488fdd511a5413a85ef4e8da159b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76841 Malicious code in andi-rangginang63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecd1823f954ac1d2dc3c1163376474235a65016d63f8aff798a9b919d4966a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81204 Malicious code in rudi-tongseng51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9caf99fda60da8ff707aebb6f5e8f5603451512d2c4aeecb88b90d053d556ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-tempe15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2004d468fce32be558925096d8b6cfeafcc0a90a021b7d569983ef389911258b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-papeda69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee1564ca1f262805c9cf7ab72d139b76edbd0ded54140b935ab7b353ec2712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7860d55081883404476f398c4b1e4bdcbfeedebc5965be487f89f928a5ad944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-mieayam85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244b0fcec5d450777372daa069d97f9cda093c21ad6a98bc3be218e4ee605b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-naget2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9257839f59a339a376c98a1ecfbcec9bacb51e28398e2cd55f3cba128a5260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-klipo47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb82aebe8a1a372fe7aa3d7f55df7f5cbd5d82917e167e75fd470e2eb283b1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd23ebd8e211b1471c2c3b78ef2409b4cf60b1a0deb391a5fb9dd0148405eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-kue51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f6bd0d0e86dc41c8697814fdf1824d91576c4523e1e644c7582327b7945bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-menjes63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b02069824790ea7fae3ce08cc8f5da6e3dfe408cf9477a376e5883b8365249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-ongol-ongol24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e84e8ffaad8e8a5a2e138e521d114abf4d81249dbb06c1479901fb230333b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-miebogor13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f4aada89f808812fdba16c9a2687790bb9373c45058cd88069d2cefa7e6bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...