MAL-2025-178117 Malicious code in polymer-tresd-tdfseh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28986c833c0c5610ccbe92405e5317d3d7dca500d588fb8f0213a083a2148823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173986 Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177339 Malicious code in poglymer-ogih-gagofgasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b419666ec0db9bca3e9f42c14b87cda293c08cad5a23dc8461973fe3d6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174674 Malicious code in hitachi-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65605f465179cb163279ea9dd8e053eeab352e10872c0362b06d2e751a10ef07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175235 Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172839 Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174288 Malicious code in goodaan-ngafsa-nfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01133deb3510f85578d253a9059fb764c6873d014d38770f76b6eae23a43f66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafbf55daefe19b5f9f9e98a22ebc4aaa4731b6535ddf0ef234207923f527dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172868 Malicious code in ananda-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa155cc86240ca8ba1ea2b62b9ea36e2835bf85450e68f3703f2b45b6b776d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173769 Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175920 Malicious code in mahiy-sutabu-gin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e157c750984d6059f5e0177cc89e863199cca889ff7b88bb6f4c4736d0cd902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174760 Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174752 Malicious code in hokage-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7472aff56ddfb1ce95a8d5a53c20427f097992fa571d42e0bc118ea415dd024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174446 Malicious code in goodain-nusafaia-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4485c7a870509f21e61d07661df823ac4b4f50a53f40367563a552d97a46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174317 Malicious code in goodaan-nusafa-nfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c8dc3d01a03d66f2ec8e404c0466197f9b55402d0692307df4c45f65381742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-27368

CVE-2025-27368 affects IBM OpenPages 9.0 and 9.1, where insufficient access control on certain OpenPages REST endpoints allows an authenticated user to view system metadata beyond their authorization. The issue stems from weaker than expected REST endpoint security, enabling information disclosur...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

Malicious code in heres-matinla-uni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbf3f03f66688a592d061c6e46a97144ba27c05bc25ecd2532cc8fb407e23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-hogu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba11297848be3e78b90ac58afe06d6b281fd6ac70f31eeab792a324d6573101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...