Malicious code in okta-naget47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a91a1b5bbcc8605d53f36c4fafd800818742d5ece869abfb0cae9b829d52535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kolak11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce63c2c6980d360c3d0fa660f570b75401a28aacc41d1e1f099d4951aa44cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-wajit66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe3b50e1152a196a06b06451a72de9acf8593f23e72b018c0b18d11c9da87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53597 Malicious code in ocha-kepok93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415e094b1c6c2774199a6bae9333718029d8b72e11471822966b737e1ed37cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketoprak72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f1b27c4d024b8b75f46b616364144b4e629b5ba6072b71aadf9340eb48e6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53572 Malicious code in nurul-sego2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c35aad6ae9c2cb78bb1f24a02b079e0c07d085e289a2cebfc4b0e7f6e7836a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b015de9c0fa1d4ff8d1f89a2ebfa9c34237da8a8d2a5c2adcb36e5c7e4b5d The package dono-gorengan92-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in arif-kue51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c043775d225224a638d6aa61119d85eb7c8a6526865a5ece9d0dc7eda19e The package arif-kue51-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50411 Malicious code in fauzi-donat87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a594b86af2104fdf24d14d1ce3a7cab1ecb24545860ebc9edde258dc25538ba The package fauzi-donat87-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in erwin-asinan76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fee842831b90369247c6e083f49be0a7856124461220c78334b2f7d2828c90 The package erwin-asinan76-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in bella-nasicampur67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530e615606c3fac9b878efa9fce5921264bd3bf350baad231848e85ecf5c1aa3 The package bella-nasicampur67-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50020 Malicious code in candra-tempe33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d4e755c9c0a7efdce38edb06dde36a38dacbc5b906cd4b286a2993c120c05 The package candra-tempe33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50639 Malicious code in vera-peyek48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6073fc534b9a7e2b4290fa0d2034adaff35af8c0318c03f6123f1ca7394143c The package vera-peyek48-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-lutis24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d13fc402164427836b71b307792739dcfa8bc667b7d46b87d1951a6cbe526b The package budi-lutis24-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50089 Malicious code in cindy-keripik40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a666b8d392dfd806b471245acdea4c2f6b7a2deb5e55e8313bbac184d8e948 The package cindy-keripik40-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50408 Malicious code in fajar-tomat64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b55c53a1ab6430aac9453f8cad40e6aabd3b80e0760b5347422b020f016e1e The package fajar-tomat64-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50405 Malicious code in fajar-sambel40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca9c6587d4d84daa0288c9a84982392a9c855b6a8cf36859ca1f253ffe07361 The package fajar-sambel40-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

编号撤回

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

Oracle Linux 9 : osbuild-composer (ELSA-2025-19594)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19594 advisory. 132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIR...

PT-2025-46157

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A missing VCS URL validation in JetBrains YouTrack allows delegation to unauthorized repositories through the Junie widget. This issue affects versions prior to 2025.3.104432...