EUVD-2025-73805

Malicious code in secretnewtz3n npm...

MAL-2025-96481 Malicious code in secret_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1170e6a82c6669653aefc04de05dc9336ffc061cf8a3f53d0e948d7c01fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66803

Malicious code in secretslugz3n npm...

MAL-2025-72706 Malicious code in eko-lapis27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c120376d33866655a33d17d1101218a713f4867f06a1120472927ba3898ab24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76659 Malicious code in rulesdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c805fe99761f008f2684b4317d760d59a99462becf37b554d6673444045ae3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secret-chocolate-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d7bf5dcebb64a8d8783f6a1867987ed01f14577ada5e5c129f3c8bfd3e25fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52152

Malicious code in secret-amethyst-ermine npm...

MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52151

Malicious code in secret-azure-eel npm...

EUVD-2025-52150

Malicious code in secret-beige-kingfisher npm...

EUVD-2025-52148

Malicious code in secret-emerald-bobcat npm...

MAL-2025-70499 Malicious code in secret-beige-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca5ddb2aada85d6113bba08ef4b4679c64b0438db20e0b9beaea61b9fe7a900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52147

Malicious code in secret-yellow-cicada npm...

Malicious code in secret-emerald-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1fdf4c992f36973affdc94f410feba97e816ab7474a466e524a0ddc8150ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-beige-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca5ddb2aada85d6113bba08ef4b4679c64b0438db20e0b9beaea61b9fe7a900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-amethyst-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8de8eca33dcc775bada0f3715b073561aca260396acaa394f93be6386fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52149

Malicious code in secret-chocolate-haddock npm...

EUVD-2025-57371

Malicious code in secretmothz3n npm...

Malicious code in secret_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1556943d5fdeb847ccf08d3aadd8e6bb4877668460d03d94d2fd76ba3a0c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42890

SAP SQL Anywhere Monitor (Non-GUI) contains hard-coded credentials in its code, affecting version 17.0 and earlier (prior to SAP Note 3666261). This creates risk of unauthorized access and potential arbitrary code execution. Remediation: apply SAP Note 3666261 and rotate related credentials. As a...