Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156241 Malicious code in ilang-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442cea6bcf0204ca37f0558a07718ac8fed90d8800261cbf2df2af699ddd722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155596 Malicious code in hafiz-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55223a0f4957950a4512411668c98866bb6846a58018c850b9cb595a453bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156549 Malicious code in intan-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7222ff48f9de7bea1743c8b17e5f4d2305e7d920269db500aeef2bc638b466ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e678d34e8356f50e80c8c4832f41020bf23762aaa9e4ce27bf7051c866774e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21d45ea747947cef40b5ef0515d23e7592d6a8c4031f343a00256f03e490b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3786b8e00dfa16a908c2c5c3b57a5c3cbe02770e58fc0fb4d4f0e27c7e35d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e273e508a8868d302b61a6fa44b89427294635961421cbec37e3d2784bb6f99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160824 Malicious code in muklis-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b035e17e6c2d344e5e658fcda25c60add554a83d778006c95954ae9eb967329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55223a0f4957950a4512411668c98866bb6846a58018c850b9cb595a453bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec1c51633cf19a011e906760d6da91755c396eee468f4b10799d539e0c835d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146216

Malicious code in yuda-4 npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

Malicious code in alvino-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b123549e7c9f18aae9a57d82d67d441d1ff92bd234e81d993231542b7f8b045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

Null-safe applications with Spring Boot 4

This is a new blog post in the Road to GA series, this time sharing an update on the status of the null-safety support across the Spring portfolio, as a follow-up of my previous related blog post Null Safety in Spring applications with JSpecify and NullAway and related Spring I/O talk. Are we...

CVE-2024-32009

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges...

CVE-2024-32008

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user...

CVE-2024-32011

CVE-2024-32011 affects Siemens Spectrum Power 4 (all versions

EUVD-2024-29849

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application use...