MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67359 Malicious code in competent-rose-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c5c41099453d627bee3def3c4f66124b90cd5f048d00d76e8b405ca6b6aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67920 Malicious code in early-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f794fa3273d5f4b5c7b4674bd9c1b1d29765cbf4d380c4df2e10b73592d04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68588 Malicious code in grieving-amethyst-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747575ade7f734a7f2a68f956dc0d042ef62ddbfa251fba3fe90dc5b0c8845ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42940

CVE-2025-42940 affects SAP CommonCryptoLib. The issue is boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network, leading to memory corruption and an application crash. Impact is high on availability, with no confidentiality or integrity impact stated. Connect...

Malicious code in normal_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182e94620b61cf582c91286d6822fe4222a16744d191056622ed005d0c780009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendoan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1add8b35227938204bdba8da1d1d0fca6e4c8b22294330a0f4832cbe1fdfbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kemplang66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80e954fb21fb200a2ed68745f8d434fecd46ccd0418528e1a33fd68818fdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2b292ca93f6234fbfdc60318aaaa3090823c17d74d4d4d97ee92cacac198e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-martabak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb35902e13ee8c604f2b41fac49ab7446ae92f9e447a26f5709b83e52e97b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-botok50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfada911c7899e28544eef8eac66ff4a91fee1ffef59700bcb9200f860603c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9795cb85c6851b8736e7d96bc12182feb3d2383bdeb66ee86f78a81728fb5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-pecel91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec406734f2fcefd138c5266ce3dba776827a48dbcee7d4a736e86e24edce89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64200 Malicious code in mahesa-rendang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de2c9ac627a70974004a6bcb1a71993a5da08d9a139c5e23e3a786555023393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64323 Malicious code in molecular_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690e1cea006dd78ba30e9b8ae1a8c20674b6ffbbdd3f906a3f772ba1224091f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9caa0fc7e979820cd2b384491b41631dbf1fd37a0a958d5fdd262d9267a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafb57dfc55c116c21cca6b7d7cdc7e7f89d48b728acd73dae5e32fbfca8b8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-rangi57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5085487c5db456063415ba6bded85ac66660c883a9026735cc60eec6e10a463d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rujak11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de579c460c747bde98379797ec9744d3fcdd7d32dd269edc64f280d1e55d2e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01709b1a208ce896188145348ce894742beb67133bcde983a2608a120f7b101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...