MAL-2025-71886 Malicious code in agus-martabak70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722af7dcd90e37ffaae6dc37417d882455f1e06b77168796f2bda8180a27109a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75547 Malicious code in surya-sasag59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a709a5d5c8a080894795d9cc3925010e14af9e46a5435273a973da0ea3688672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74205 Malicious code in lisa-sambel24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a69316800207c79de7dd8d42122717deb5a369c9906bc8b3d78ad644400b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75723 Malicious code in tomi-nasiuduk43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc67fc4af8f739e9ed6332da0cabbd0b326bcf9b9f06377ba7befb7dbbda3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72969 Malicious code in fitri-gorengan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29654a8dbdfc36f69342f19a05d768f00d9d392f1ba63efda421bc79ea240c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75978 Malicious code in vera-mieayam90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f52bb8dbda545bc240eea98ec30f1aea34e5331bb2b0c1fd809d0b876427217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75152 Malicious code in riana-mie38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b37bd20f3886b7d1049b4f325c53ea6be57aa8441ed69aa60e373ccd42cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74277 Malicious code in mahesa-enting90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db22c3f36ab9c606eac1b2ff69fe19236f54527595066284cd6b649357368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-rangginang95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a2a392592a7bee87a2a3172faf8e55cf086b51fa7fbaaaf115fcfc30fb7f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73055 Malicious code in galih-serabi55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c3630bee7159788a4bacdac9cb444cc87e2d30d41fd2fc9865de7da5a1aad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74898 Malicious code in patria-menjes9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a691a88d1a191dd08efadcb68dd14514e4b15ce2aab37e56c69f00f29c0ffc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73033 Malicious code in galih-kue87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d102d6875d4030abec4b0ae9ac8cf84aeea558c7583760209da59d62b6f7228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74533 Malicious code in nadia-sego68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5671530570d87583ddb5b1d9c220178c7ed0ae15059673f1fc8c0ed19cd515ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74747 Malicious code in ogi-nasiuduk45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38cc8f7fcf21e0c3690d3f41c7e0643505d247ece9a4237230d580e7bc856a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74485 Malicious code in mulyono-rendang76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f2ad676385bfd68d7584320c9c46d5e885c5dd805d6cc06b56489e410ff83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42919

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in bold-amber-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c214348716d73ee2271898d203b2fe300efd95831aa24766074fea8f365783b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...