MAL-2025-66159 Malicious code in wibowo-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d6d90ef61c72754a6fb679385c6fb04c10325311f1b58bad8b9d73881b8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64456 Malicious code in nana-mangut81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e61d674e3e115dd1c418803a11e116a235a10ff044bb90f56f65802299b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63259 Malicious code in hadianto-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bbe82322a1764fa61795890807aaed7773463e77e1b6f897bb368be929549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63761 Malicious code in joni-kue76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd35e9cc3d662ce998a268541455dd1e7f1e1a3a3f37e8499137ef43caa0926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...

SAP NetWeaver Enterprise Portal 安全漏洞

SAP NetWeaver Enterprise Portal is a Web front-end component of SAP NetWeaver from SAP, Germany. A security vulnerability exists in SAP NetWeaver Enterprise Portal that originates from an unauthenticated attacker being able to inject JNDI environment properties or pass URLs used during a JNDI...

PT-2025-46225

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal affected versions not specified Description An unauthenticated attacker can inject JNDI environment properties or provide a URL during JNDI lookup operations. This could allow access to an unintended JNDI...

Malicious code in dying_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76ef207e84f9cf657e92bab51ec5b850ffd1bb57aeebf545c14fac9b9aa9c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60817 Malicious code in marine_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75330045da18607cb3fc0cff327b0a9949892d5e686bd7de39e1a8051c2c864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55046 Malicious code in accurate_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b98300ba19497f9105743fc49a9c726671f0c9a4537074c8c19061611ff97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56941 Malicious code in iwan-rawon20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079b547834d5527507baa2d57771289cfd846f8d1f396b480346195ee577d7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59580 Malicious code in xaver-sroto85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865f3a46e078288e7db7d0eeb2f35965f5f59c17c70e992785ae9ed064a775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59064 Malicious code in udin-miebogor7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f55788754d77bf7f0ceb1cacecdec09e38e3c6cb89abb3e326caa180363817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56525 Malicious code in gita-papeda11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300695bdcbc10506908f1b34bdcb65908fb8b880ee50eab772b76ef8fdd9be5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55340 Malicious code in bayu-rangginang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f60c70a2bc777c563f0866c609be7bdbc0b22abb52be95579a1d015b8530f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lengko94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83888882fe4f26dbfa7fe855ca0000d45834b8202787ba3464b60a8cba28778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53036 Malicious code in joko-takokak71-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5242f4bad2527fcdd593e09e1516143c385b4b8f7b5ac369f9a4f4a1093800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-brengkes44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a14a95b3823849f48d1a08841c3be2a86dc6f0c7091468b97cde36eb515ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...