Malicious code in past-sapphire-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db19159f743e92941f4ade673f87684ea41cc0b81272779e6a256f1309f30bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68588 Malicious code in grieving-amethyst-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747575ade7f734a7f2a68f956dc0d042ef62ddbfa251fba3fe90dc5b0c8845ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67254 Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71509 Malicious code in vulnerable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d5724174c472617ebce46ef640bc02925d0ee131cde1d06944e0e4ae727312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67920 Malicious code in early-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f794fa3273d5f4b5c7b4674bd9c1b1d29765cbf4d380c4df2e10b73592d04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71299 Malicious code in uninterested-green-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da78968ea1f614a9d7ada040b17d45943205fee7b5b8edcbe86927d15ec04e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69906 Malicious code in plastic-tomato-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ceb41358fc5f7351f382c2dee5db741e215234e0792a11f90a5e4e1c7ff3d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67824 Malicious code in divine-orange-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade43c364fc69160f79d73c2377e60b65c076b3cb976cd1aa7d9760d5d23ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67359 Malicious code in competent-rose-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c5c41099453d627bee3def3c4f66124b90cd5f048d00d76e8b405ca6b6aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71057 Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42940

CVE-2025-42940 affects SAP CommonCryptoLib. The issue is boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network, leading to memory corruption and an application crash. Impact is high on availability, with no confidentiality or integrity impact stated. Connect...

Malicious code in normal_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182e94620b61cf582c91286d6822fe4222a16744d191056622ed005d0c780009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendoan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1add8b35227938204bdba8da1d1d0fca6e4c8b22294330a0f4832cbe1fdfbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kemplang66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80e954fb21fb200a2ed68745f8d434fecd46ccd0418528e1a33fd68818fdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2b292ca93f6234fbfdc60318aaaa3090823c17d74d4d4d97ee92cacac198e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-martabak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb35902e13ee8c604f2b41fac49ab7446ae92f9e447a26f5709b83e52e97b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9caa0fc7e979820cd2b384491b41631dbf1fd37a0a958d5fdd262d9267a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-botok50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfada911c7899e28544eef8eac66ff4a91fee1ffef59700bcb9200f860603c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9795cb85c6851b8736e7d96bc12182feb3d2383bdeb66ee86f78a81728fb5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...