MAL-2025-63569 Malicious code in irma-tongseng18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d17b06ebf237bbdfad472e33782aa0a81aad4c9186dc93f0eece8a115275dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45be27ccbad633fc239eea4337f1d6dbef761700239a7c7d9a10a0d63c8b8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasicampur50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb4f73b630fb5fc7f82a0ea405591fcd16e849bbd7a878944f4bf442919ee9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-sambel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27bbad4dc8d854ca89cf4c607bfdbbbd4926a8a346149e3582942657a0303cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64154 Malicious code in lutfi-sate58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6b0ae8848ee87ccff1080a946374b7b69bb91fb673763d0d7ce3f51744c776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65157 Malicious code in rina-tempe50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ed5aeb626d2d6995f7c9a9ecef8fd063541766f838c137021f13d9ec9f30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62150 Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-klipo80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965ae977e0c97404745b02956b69fbe813a73266a2d9add4992778721cfd8478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mendoan55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793a35f4f9de60d296e7e589c94d8772aaa23d9f69f39170f85f83624985430e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-liwet75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f44dc46f284baa19374c018537ed6ef0173aaa6fb1f0afdbc5757ffef345651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f6b54bae4509f5337e897b7df29ff3026f1a81deb6ff50a788e766109a7154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64193 Malicious code in mahesa-nasiuduk64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354cb1399c7ddcf731b76751223f50d1f8a73f9b5f389cb9cc591d343053efb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62359 Malicious code in clean_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f3b24034757684da10d3c6447687dd5c9ddffb8c44be3b12ca28c6fc4bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62779 Malicious code in erick-rangginang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3f02e3718b4394260efece37792ca6623ed9196f555539a348b55d1dd97572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64188 Malicious code in mahesa-mendoan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d701c0358461c315efa5b276a148f7955c0aadc34240bceb019c22b49f5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from mismanagement of privileges and can be exploited by an attacker to cause elevation of...

Intel QuickAssist Technology 安全漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. It improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A security vulnerability exists in Intel QuickAssist Technology prior to version 2.6.0, which is caused...

WordPress Easy Digital Downloads plugin order manipulation vulnerability

WordPress Easy Digital Downloads plugin is a free plugin designed for WordPress to create and manage a digital merchandising store that supports the sale of downloadable content such as eBooks, software, media and more. WordPress Easy Digital Downloads plugin suffers from an order manipulation...

PT-2025-46542

Name of the Vulnerable Software and Affected Versions LOGO! 12/24RCE 6ED1052-1MD08-0BA2 affected versions not specified LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 affected versions not specified LOGO! 230RCE 6ED1052-1FB08-0BA2 affected versions not specified LOGO! 230RCEo 6ED1052-2FB08-0BA2 affected...