Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-gray-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df0e37916912c185103a15bfc11173d3da0e3fd18ce816afe0753999ac6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8e549d9189ddec050f333731458c51f66faf37fc1b70d521cc0742c68e629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

CVE-2025-42919

CVE-2025-42919 affects the SAP NetWeaver Application Server Java. The vulnerability is an information disclosure caused by improper restriction of path components, allowing an unauthenticated attacker to access internal metadata files by crafting URLs. The impact is partial confidentiality loss; ...

Malicious code in maya-bakso46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2a0a4a82ae22390e39346ba5a9190da3d59c8f093b6d9100d3d3798996f8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d7514b4e8c530a8ea4cd8e95ce601959d90a2ec2c53ecbe2a17ad88fb5b590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-semur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba655f7425f06ba3fd869fbb70cb494841f4cb46e806905640c6ede94d54e636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161823c2e321d9121e42243ba86f3479adeb17e22754841c5453ef48c479b8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af26a3c408fc0134a07ba822ecd188c4bff9a45a04871e9ff7351939bf724773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ketan53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47ffa4b63f6ccd1e4bfecd5a8034f37f96f1ab3dd81879d79a81a1c1112c33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-sasag40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b120f22f5087a9b0ee8b507b5d1315441c1c5ec1651b7851744c4727ab13424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf86663e5bbf464c2ef92277c0d0079fd09a8e80c402e687c28c48bebe8fdfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-papeda68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4338e508980ecf60ebc6b2008b36f311d278009ba3fc48090c471e599ddcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sambel68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea95b5e682af85440590c2fbadd3753558d823b6741dd0070cfd23c5448fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubur39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f2fb84cd411f19df8301922b9e994799ab715044b0fb002df14ff729534d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...