USN-8000-1 openjdk-8 vulnerabilities

It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint connections to a remote host without setting an endpoint identification algorithm. An unauthenticated remote attacker could possibly use this issue to steal sensitive information. CVE-2026-21925 Mingijung...

USN-8000-1: OpenJDK 8 vulnerabilities

It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint connections to a remote host without setting an endpoint identification algorithm. An unauthenticated remote attacker could possibly use this issue to steal sensitive information. CVE-2026-21925 Mingijung...

USN-7996-1 openjdk-25-crac vulnerabilities

It was discovered that the RMI component of CRaC JDK 25 would establish RMI TCP endpoint connections to a remote host without setting an endpoint identification algorithm. An unauthenticated remote attacker could possibly use this issue to steal sensitive information. CVE-2026-21925 Mingijung...

USN-7995-1 openjdk-25 vulnerabilities

It was discovered that the RMI component of OpenJDK 25 would establish RMI TCP endpoint connections to a remote host without setting an endpoint identification algorithm. An unauthenticated remote attacker could possibly use this issue to steal sensitive information. CVE-2026-21925 Mingijung...

Malicious code in imailok-ofe-aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f125cfb7956f36ce92efb069fb7301a8b76e293cc63cae1a65733395ec3bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182283 Malicious code in imailok-ofe-aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f125cfb7956f36ce92efb069fb7301a8b76e293cc63cae1a65733395ec3bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137425

Malicious code in imailok-ofe-aia npm...

EUVD-2025-138441

Malicious code in polymer-aia-igaf npm...

EUVD-2025-138447

Malicious code in polymer-aia-affag npm...

Malicious code in polymer-aia-afaffyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7402b0a208a3fe0c7aa7d2beb3cbbd4bd3f1966fcf0e9616db94f23b5c621753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138446

Malicious code in polymer-aia-afffag npm...

Malicious code in polymer-aia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791409f6e5def0fed66e55679a5232944f4c382f5b528f8f2f2f9a32ee4ad04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-afag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cac1725c34727201bd20c6853922393b6953812f88fc064cc68a035d24e151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138452

Malicious code in polymer-aia-af npm...

EUVD-2025-138453

Malicious code in polymer-aia-aahai npm...

MAL-2025-177786 Malicious code in polymer-aia-ifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642c2a0ae2b58c1ca4143eaec0e168ba80a5aaead4dd81567a0f3b4a2710ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177778 Malicious code in polymer-aia-afaffag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1256a123bb81b7c94b4ea85834082f382a8cbe42378a1da235dcf0e78252b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138445

Malicious code in polymer-aia-afg npm...

EUVD-2025-136861

Malicious code in sahnim-sati-aia npm...

Malicious code in polymer-aia-igaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3939eae8bb22644d710abcc4f2bb04989fe6a2a32c6a6d2e45a62a7df3d3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...