EUVD-2025-178101

Malicious code in library-nebula-rest-local npm...

Malicious code in rest-lightyear-mensa-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899e37ba29ad589e48403c2bd57f0465349f7d19e4ee0ae2c3d60c2868ce9e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189217 Malicious code in rest-version-library-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b01d06955b1393fdf87ea7bfd085c32e43a39e890b503008aefae093db6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189214 Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490d6f037ba5aba42fdaf960b0d8bbe6e55f94782153789b5b8d489e6eca4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179421

Malicious code in dactyl-phoenix-rest-gulp npm...

MAL-2025-190399 Malicious code in xml-proxima-rest-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1102d2c7aae26b1696c4937b33f1603f7e0cb43277d6af00d48ae46b44ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190111 Malicious code in ursa-mui-rest-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a71a493d110cf2e7816f24eef54463d089d4c2e0edc6334e41d45e9665c6334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46776

Name of the Vulnerable Software and Affected Versions LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin versions 3.5.3 through 3.41.2 LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin versions 4.0.0 through 4.21.3 LifterLMS – WP LMS for eLearning, Online Courses,...

CVE-2025-27368

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

CVE-2025-27368

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

Malicious code in thambi-ref-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137490

Malicious code in polymer-rest-reua npm...

EUVD-2025-135563

Malicious code in thambi-retf-rest npm...

EUVD-2025-135579

Malicious code in thambi-ref-rest npm...

EUVD-2025-135564

Malicious code in thambi-retf-rest npm...

Malicious code in savion-rest-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136429

Malicious code in savion-rest-pix npm...

MAL-2025-179077 Malicious code in thambi-ref-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6cd673bb8cdbd99e016e6d67c26517830e699ae09c7eec9a17fd547f6ab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178632 Malicious code in savion-rest-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...