ROS-20251124-11

A vulnerability in the Libraries component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to access control weaknesses. Exploitation of the vulnerability could allow an attacker acting remotely to impact data integrity...

EUVD-2025-198066

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the vi...

MAL-2025-183671 Malicious code in manu-oi-gisg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1552eb8c34c4f3b20aaade8fc8b25211d13be55f2101452766998878853d8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ea5af768ec487dee01cd9b642a79c75402088ff9d4b853f3274e0e1540e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e0300c13c2602470e67f97910db22e22df755551c6f0583e85e3e50353ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8620cee44193be21fced47c27dd843523534bced4e450b7a45468263208b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170506 Malicious code in verify-tayic-iamsunasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9e162f9407023789b23cd1f5e8c525e95932485f297672a2c04bf22782c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162736 Malicious code in nokire-kore6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e5163be3c431d6b19c5b3e335cc58e8305bd96e9c39d67f2e88ee35a9a97ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162780 Malicious code in nokire-lokcek27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ddfa3dfb2120daec0188c11ba2c83d26b2f2f0fe31d38a73572f22e9ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136075 Malicious code in okta-toge82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b35a46ff0d4ee0c291bc872aad721bb3ba5eddc6c59780fc11221342ce9ca7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135709 Malicious code in nadia-tempe47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e95998a9fd51b9944968365c3f5c4bc7ea686e88e2d99e285792a308c27247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-dodol49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126072ae8a0c1f27a51d9bb81cf687b8974a388baf664561e1d1feee0b118264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rangi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96887d872a54b0c7c39248f2f3757eed4f08b24973a72e7dc8918c67c600670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125321 Malicious code in casual_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fbf203f0b97f06d8cfb2580afba631f195b148cc2718a530160cc20569b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sasag2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc139812da74a10222faab76102e5abbad355922d98f6fbd80315dcd4a515ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121865 Malicious code in mixed_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec2bd7081689ed05e28cbe6f538f7a18db295b00a10de42460778a5451a8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gepuk35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0268e86e3e932ef43666416419299cd2f828159eca5ce76ce87598f6cdc57bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-naget97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392d290bc03505ebb67c2b6cfece8007fae1c0b482cace46a1a25e05897b68a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107150 Malicious code in positive_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a8097d066b33898650edcda8c8b707c9717f99b45c3c9f02958db91b1b48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...