Malicious code in eager_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81684ac3de772477c2d69ede1261211c9aef8c1c0fc9f46fea76024919dbdc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-teh43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33dff26f4bf6bba7c6b46cd1944e3ba43a95eeedc6a3a86c3469a00d995eb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81204 Malicious code in rudi-tongseng51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9caf99fda60da8ff707aebb6f5e8f5603451512d2c4aeecb88b90d053d556ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-serimuka55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dcacaf001c3812c2684999c4363fa55348e6915224b887a6bdebcc7cddbcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-menjes32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c464451f1ce5a94837510270163020aa56ef380495c141cea8cce249d993a755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7554d54efd87b6776fe4de016f3fdff91bde178e5f84fb5aa7416540cfedd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasicampur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac2f06f33352ecdd1a7fefc1df7c855fc7867e3fd6512021d1bc8f385b1c6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sambalado85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9030c3444688ed363a4cf20b6259f76c0875d8e04ab3d350a3000ac1835cf118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76369 Malicious code in yanti-klanting21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a777bb9c92f0ba8ece4dc8d892d884314d9d3570fa1e2078ff842273ef438c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-soto14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4881c4f4da7493cb6e59947c2320debf3a76d77ba1e00c91e773e3867e0f88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74908 Malicious code in patria-sate87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75ec98058ef003485f1215fa6a82d200dfe9ecc1eccd00bd8ec18a7624fdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72749 Malicious code in erick-kepok32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eb4d65adda9c1d663e570468220f9de8e1db95afc53182a889423271558364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-brengkes51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489fb71884438c9f2e00aedbad3221de1c49990de7148c6fc3801fabefc53618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73358 Malicious code in hanafi-wajit54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c01dbb6dcb3f168ba585f8e60ad1c6bd2f8e9a443274e2e3f0125a61b34851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...

Malicious code in strict-crimson-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83796d804f3ed5ccaed1790eafea045b3b054603a40d0718b3fb5cf72aff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70184 Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cba47d5bed1917dbae0d59417ccca8dbc27333a3f85ce9cbcaf1adaecfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-miebogor68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a37b961fcb4ec9fa97c2ea2fea874a1caaaed16b15f5bfe522ac558007942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...