Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67359 Malicious code in competent-rose-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c5c41099453d627bee3def3c4f66124b90cd5f048d00d76e8b405ca6b6aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty-coffee-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a96d740a80e4ce8e80b4b77bddf107176b3de94ddec2c14ba359559605fcbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71509 Malicious code in vulnerable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d5724174c472617ebce46ef640bc02925d0ee131cde1d06944e0e4ae727312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67254 Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68588 Malicious code in grieving-amethyst-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747575ade7f734a7f2a68f956dc0d042ef62ddbfa251fba3fe90dc5b0c8845ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71299 Malicious code in uninterested-green-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da78968ea1f614a9d7ada040b17d45943205fee7b5b8edcbe86927d15ec04e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70773 Malicious code in spiritual-lime-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c1a7bc12603a05eae6f51d99170667a8b6aea2a48bdc34820f60bc2e03f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71057 Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69906 Malicious code in plastic-tomato-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ceb41358fc5f7351f382c2dee5db741e215234e0792a11f90a5e4e1c7ff3d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67824 Malicious code in divine-orange-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade43c364fc69160f79d73c2377e60b65c076b3cb976cd1aa7d9760d5d23ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67920 Malicious code in early-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f794fa3273d5f4b5c7b4674bd9c1b1d29765cbf4d380c4df2e10b73592d04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42940

CVE-2025-42940 affects SAP CommonCryptoLib. The issue is boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network, leading to memory corruption and an application crash. Impact is high on availability, with no confidentiality or integrity impact stated. Connect...

Malicious code in irma-kemplang66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80e954fb21fb200a2ed68745f8d434fecd46ccd0418528e1a33fd68818fdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2b292ca93f6234fbfdc60318aaaa3090823c17d74d4d4d97ee92cacac198e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendoan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1add8b35227938204bdba8da1d1d0fca6e4c8b22294330a0f4832cbe1fdfbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9795cb85c6851b8736e7d96bc12182feb3d2383bdeb66ee86f78a81728fb5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-pecel91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec406734f2fcefd138c5266ce3dba776827a48dbcee7d4a736e86e24edce89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9caa0fc7e979820cd2b384491b41631dbf1fd37a0a958d5fdd262d9267a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...