MAL-2025-158705 Malicious code in lookingan-namakita89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb500741c8a22743a7072be6bb6f139fac08b0924af5899c144312d01814294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-uyokafi (1.0.0)

makan-aiuga-uyokafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-uyokafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159230...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala38 (1.0.0)

nokire-nakala38 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala38 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162991...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-korean2 (1.0.0)

nokire-korean2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-korean2 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162751...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-30 (1.0.0)

manda-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159627...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala55 (1.0.0)

nokire-nakala55 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala55 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163009...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

EUVD-2025-143812

Malicious code in nabuf-otogamafian-dohjau npm...

EUVD-2025-147219

Malicious code in uarg-masituhai-suf npm...

EUVD-2025-149050

Malicious code in teagood-sukuna100 npm...

EUVD-2025-149950

Malicious code in teagood-cuekin92 npm...

Malicious code in lookingan-nalako87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34301443f937e5258814341a066b41cff635ac64defbf622aa253d0acd51a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfaeg-naahgsa (1.0.0)

nudela-rahfaeg-naahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfaeg-naahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163830...

400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-29 (1.0.0)

muklis-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160813...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-30 (1.0.0)

muklis-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160815...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.2.2 Vulnerability Details CVEID:CVE-2024-55459 DESCRIPTION: An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile...