MAL-2025-78898 Malicious code in ideological_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f5b066ae22fe3b6ea324b6fbf8277de3bdb947162f93469f4fe3ea537e162a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78558 Malicious code in grim_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43195c80067fa477895a9e5ba12149a26ced5f0ede5f3c632906a355dcf9aa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60985

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

Malicious code in rulesdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c805fe99761f008f2684b4317d760d59a99462becf37b554d6673444045ae3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-76658 Malicious code in no-barrel-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26ffac772339a03c38a909739d6648394caa3bf5f5d6052d35cb5c0ef21ac33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-76659 Malicious code in rulesdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c805fe99761f008f2684b4317d760d59a99462becf37b554d6673444045ae3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-42894

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

CVE-2025-42894

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

CVE-2025-42892

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...

EUVD-2025-51114

Malicious code in weekly-copper-grouse npm...

Malicious code in elated-purple-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe072a1cd0e4b0a5d5f2aa0a8aa1db6bb865dc5aebb6999466bb5a84be708d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70117 Malicious code in puzzled-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cd3fd6c02d9098784428424e4fbeb018b16fc13343e5318cf785795774cfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70357 Malicious code in resonant-gold-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61bad47b0d5de42a99e5a8f18c2e50c6efe9d5dfae230ef2f19446a1d3a964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42894

SAP Business Connector is affected by a Path Traversal vulnerability. An attacker authenticated as an administrator with adjacent access can read, write, overwrite, and delete arbitrary files on the host, potentially enabling execution of arbitrary OS commands and full system compromise. The issu...

CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

EUVD-2025-59945

Malicious code in eka-toge68-sluey npm...

MAL-2025-65258 Malicious code in sari-telurtahu72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65848902af7098511d4ed8da56599f19cb5d0102ddfb5e25052a1ef09f087b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59718

Malicious code in fajar-mangga25-sluey npm...

Malicious code in putra-rujak51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3121f9009d17ad9e23a8fdb8065532385153caa811c8b2718ce309c2f0e232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...