MAL-2025-74747 Malicious code in ogi-nasiuduk45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38cc8f7fcf21e0c3690d3f41c7e0643505d247ece9a4237230d580e7bc856a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74277 Malicious code in mahesa-enting90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db22c3f36ab9c606eac1b2ff69fe19236f54527595066284cd6b649357368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75152 Malicious code in riana-mie38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b37bd20f3886b7d1049b4f325c53ea6be57aa8441ed69aa60e373ccd42cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42919

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c4746010c8c717817539b1013ed3143ecb21df2b8bb8449f7fccf9af2bd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62a9072d0de720446707058a88dd8d28fe9dcc26968e07cfec16d4b822e0959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-black-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a3cd036500e2c1ba1c2d1c46c4323b46dff5f713f588dbd44cd90cb0b3042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-tomato-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc9eb96f6ea491f125e2a8ffc9ab979f049abeece0051f7269e05d6a12ecf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-rose-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53339d445a887cc17c7073bb86fae58ddfa55e64920f44ec0c8681d97a276e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9fa79a23d697727fd38892a3fec012b292541c3c9ba468beebdb90ff64a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful-aquamarine-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8263d2c6e48ea165f9c77064c420b44ec852bf66784508d06430f94345b5ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-gold-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145a79b328c66987ae84ddc2804d7e49501a8a21ecf91b8a29dcd64c86f55f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-rose-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a79522cea948231fa43638c4e02b0967b64522b2d2fc96bea075100fb1f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...