MAL-2025-161327 Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoli-ailasoml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e850873148b5bb8dacac08ace2faaf7478b27680811e61a36adfd1454a59fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708972f026f574ab3eb49006e63c50a1d1e3cfe326683395cbd6ce0c99601c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159666 Malicious code in mans-manap-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce20956627010af986a164d05e3300b076ed2ebc28b4a1517efed72af06b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161201 Malicious code in nabila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0d8313f5eed921302657b7f1776aeec4b30bbb64f760ac5d6f5b9581d2992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158383 Malicious code in lookingan-nakomi25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733515eb6b4d9adeb43540c53723f2acb96cce913f8fc44db6f2d3ef216c154d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103fcecd6f6c1e18cbb2afeb6e633b95d6c3b328914bfe0f4175145885f6e28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0f9c62ca015d8bc6075952cb5b2372299ca1a1a69659bb5db2f11140dab08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafifd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c69f5d5aa3142f4deed5d5aa743047e4a30e7217d89fe3b36d979fdc695e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160996 Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166770 Malicious code in teagood-cuekin1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daec12bee161d9ae80499645f638a7131289ce9cbdf9a3b91507f675d73e5c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170094 Malicious code in upa-lubalauvalio-ilualsgdfsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75f1a91d1cc1c9ffb941f3c458c9798808158b9d8b156f1e981bf2675c86c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150806 Malicious code in @miptaa02/kwnhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045478e07c8fe3cfeabeadda1e69a9a3ce52f3c54756b426c9b26d14049a9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofafafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c95b7b26daee26bff5eff26c855d513c9302629e6430b919879202f2d1fb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3450d754e526cb305a74616b587fe87b080c0812abc502eba1a8337cb2ae485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: IBM QRadar SIEM is affected by improper storage of credentials in configuration files

Summary IBM QRadar SIEM is affected by improper storage of credentials in configuration files in source control. IBM has addressed the issue in the latest update. Vulnerability Details CVEID:CVE-2025-33119 DESCRIPTION: IBM QRadar SIEM stores user credentials in configuration files in source contr...