Malicious code in tomi-telur68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0334db9939680d5b80073f76c398ae3b813cdb5a6b125959bf74cc6f83815828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

EUVD-2025-91252

Malicious code in hiddenlemmingz3n npm...

MAL-2025-114632 Malicious code in hidden_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85984fb4b5e32eb6df84a653975c9c4c71cd4b72a3aeaa9ad4e48d0849a9f75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74581

Malicious code in hiddenlimpetindigo-4 npm...

EUVD-2025-74580

Malicious code in hiddenlocustjade-78 npm...

EUVD-2025-74579

Malicious code in hiddenmastodonsalmon-43 npm...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76668

Malicious code in hiddeneagle-silentdev npm...

EUVD-2025-63737

Malicious code in hiddenpeafowlz3n npm...

EUVD-2025-63736

Malicious code in hiddenpythonz3n npm...

MAL-2025-94818 Malicious code in hidden_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f23ea0e5c87bfbb863cf4d4f6cdecfbd891e54db7d9ac1bd536b4d9429e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78816 Malicious code in hidden_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5e59882673eea85722cd4857a9d4a0276cd5f73790cbacea12bb60ab44d0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53983

Malicious code in hidden-purple-booby npm...

Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50805

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150 IBM Cognos Analytics Certified Containers information disclosure

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

CVE-2025-33150 affects IBM Cognos Analytics Certified Containers 12.1.0. The issue is information disclosure due to hidden pages that could reveal package parameter information. Public sources confirm the affected product/version and provide a remediation path: upgrade to 12.1.1. No exploit detai...