MAL-2025-80198 Malicious code in nana-rangi100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b44dcfdb3932dc8ad1ae785b3e912e107ff60749f261c1371e273677d4ac25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80792 Malicious code in putri-martabak26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e658698acd726af2b87bb0d2e94d8051bfb9d96b849266ee3bad221abe1ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-donat99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3818eb5d5fa6d5d4ca8752e5d4c71cc0c9140435526c3c1276b60f21f73963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7751de5ef2c2a0be1e32e434619552b42fe6ba72a774ae56086170813bf79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60996

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...

MAL-2025-75376 Malicious code in sari-kacang14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dce77541849dc1535f45c078a94097327ea5b93150591a4e938e8ccaa316079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74281 Malicious code in mahesa-klanting73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5a004aca47e0ab5686b19fdc5900fd246e7c649f00a4bdcd0ae0f189deae9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69407 Malicious code in ministerial-blush-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ff0093a820d6f6691e64da68e8b8ce039cd1d7ab3ed8ff114a2b07ceef24b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69293 Malicious code in manual-lime-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b96ac4c18e4c8d1f8052375b93922ea8222e7aefb1b7bd7047486e686cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63085 Malicious code in galih-serabi92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dfff494e7d694336201a36f7f16fa99d299d52c82fc0dfd3143739b02542f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550a134328f80ffa4b1dfb72f16fc3c3ab2c001ee2f672aba812e18216f7dcb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d6d90ef61c72754a6fb679385c6fb04c10325311f1b58bad8b9d73881b8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66177 Malicious code in wibowo-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211269c5dfe5927b77a77ea0667aa421a93c8d91e815ad2c860d5c418749e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66392 Malicious code in yuni-serimuka53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2e6cee41bd70775db2a7a9d85fee658da2805b22240988804ba8ad59a4588e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 Field Service...

Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection

Face recognition systems are increasingly deployed across a wide range of applications, including smartphone authentication, access control, and border security. However, these systems remain vulnerable to presentation attacks PAs, which can significantly compromise their reliability. In this wor...

Amazon Linux 2 : pam, --advisory ALAS2-2025-3057 (ALAS-2025-3057)

The version of pam installed on the remote host is prior to 1.1.8-23. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3057 advisory. A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit...

MAL-2025-61493 Malicious code in traditional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a079749619fd72f83d44fe744d30a630485b6889d567a05e699a265bcdba09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61546 Malicious code in urban_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a3c8fc59135099de71705130769b28bfbb7ccd908d9681c00ad32fcca7f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5452761e1a3a92e1dab9f932f55f17ee9123a50cdfbadf375d80fec9e8df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...