Malicious code in worthwhile_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e34193bce103def513324a8b2d9b1d6ab5d75e13422c4213ced61a12b86ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116792 Malicious code in rifqi-rojak2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5553e774deab000565c71eafe3702dbfebc586994aee160313be6d8c9153e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114367 Malicious code in governing_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bbe717edcfec2b8833573588e668aef45cf9038d52e8a0511f005d4f0fbe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-moci69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17ab4260f24ff776cfcb563857068c5b01a1532e9e7d98ccc493ad00c56084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113905 Malicious code in fantastic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7eec6b7c0719412c0a7635f4eca6b3f38a530d4b0dd177248da0447d1741e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118181 Malicious code in yammering_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268fe356276a62e8151c46def13ab39ed2d65646de469b75d568f001c0b8baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113471 Malicious code in dono-oncom53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1025c6b0f6da2c1ece34c380852494906f3cd95576fa9cbf959d63f3ff6b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-bakwan40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0ad51f7cde3479b8bc7b20a4d0da5c568cf4c30156ed0cb37c972ff4d400d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98aec643e2d91f59650ed75d98f4931df7909c4f2aee74f4acd011021337ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-gepuk96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee06592d2276f728ac393089c1c3cd5aa5a135728c4405b5a1a3541f1fa58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113032 Malicious code in cici-lodeh99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c322a653dc1d5f534d3e55d8d27b72054cdfb2ddf5214b2bacabbafd22811b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114499 Malicious code in hadianto-tahutek40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727e7096d2093a7641f3cc32d30120bc90d4b069739e7c6cc80c9eb629e257cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116937 Malicious code in sad_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f09339c265038351cb4b7ee185fe567f73b902ae28a2a3785b10358874d79c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117129 Malicious code in siska-otak-otak27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1e36426722ac94472acc8bba9f5a6f3635cab8470ae298d32ac10f8a7edbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112904 Malicious code in bizarre_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09ec872c1be666baaa30be0bc0de55a2f688a4b5ab4b8839f6e9bf82332918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114997 Malicious code in jaja-tahutek89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5724a6bc10c5c58b4ec055339b2cdb01884a67b46f53f7918c6b5ec3663d0c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118487 Malicious code in zul-bakwan50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74073717ff71c2c7e2383e9a5b4c92a3f0b4097b2373615cbb7f8ebb36711958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117183 Malicious code in southern_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ed5274cf058f241ac5168eed9ce6f1038e182ef965efafae837bec751d6e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.307 Vulnerability Details CVEID:CVE-2025-57810 DESCRIPTION: jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in C...

CVE-2025-11960

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Aryom Software High Technology Systems Inc. KVKNET allows Reflected XSS. This issue affects KVKNET: before 2.1.8...