EUVD-2025-135770

Malicious code in tearich-good10 npm...

Malicious code in polymer-ten-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4cb58fac5cdc657b07ea20dd13edd22f01143cd324632fafae9a893d49072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135859

Malicious code in teagod-rich10 npm...

EUVD-2025-135006

Malicious code in zaskia-poke10 npm...

EUVD-2025-141324

Malicious code in ira-10 npm...

EUVD-2025-137430

Malicious code in polymer-ten-teh npm...

EUVD-2025-135728

Malicious code in tearich-racing10 npm...

MAL-2025-178972 Malicious code in tearich-good10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb7479c450a385e1ffc8c30774c633316db55f34a90bd480a36cd4d6a9d023f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f480f6cc844c019624fc757b76ff79d1fedea008f92df1006e28c9a604e738ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b17e6bf9d7d799ff307ae3c62411d5ebd09b376c1cd04a7ba61fed72df919c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabe63bbc37362478ccb8a8f71f9b5f2a8c9c4c02c9b9e3df603f7e6671e2932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1508b2123c5cd492cdd46c10ce8a18a40b6b69a0f514b70e968c6024c661e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157991 Malicious code in layla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f9dcaf659c4f92c7fd73f123dd632cecd30660911a9e24bea92a1624e97cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c267b5be553aeabddb0206ec85f1acd92c372d8df10071809b55db83cd41ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-slide-ten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ee7c194255add6c6b3d51689d7ac3f2b45ff32a130c73faca0b80395b17b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88209dbc9f546f304d3907deb5a544978efa2fa1afd826a15a9724200d6c55f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154292 Malicious code in dia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42372fdb54c843b791f7713f6c8f2370821d4b643852c7c179fbc3fa1d64015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: Due to use of jetty-server IBM webMethods BPM is vulnerable to corrupted and/or inadvertent sharing of data between requests

Summary IBM webMethods BPM is using jetty-server which is affected by a known vulnerability CVE-2024-13009. This security bulletin provides guidance on addressing the vulnerability. Vulnerability Details CVEID:CVE-2024-13009 DESCRIPTION: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be...

Ozeki SMS Gateway 安全漏洞

Ozeki SMS Gateway is an SMS gateway from Ozeki UK. A security vulnerability exists in Ozeki SMS Gateway version 10.3.208 and earlier, which stems from a path traversal issue that could lead to the disclosure of sensitive information...

PT-2025-46679

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1, 9.4.5, 9.3.7, and 9.2.9 Splunk Cloud Platform versions prior to 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121 Description An unauthenticated attacker could construct a malicious URL utilizing the retur...