MAL-2025-179479 Malicious code in anabuyil-inan-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0093b76a3dc168824776b2ba0d76f9eb365ebf7d954e7513215813140ed82d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180715 Malicious code in teate-thy-sonic-muglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71095579b5a8d72a9f75828ee4374ae392c475c75e1bd98e6b64131bafd7e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180326 Malicious code in teate-thy-sonic-egode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd76db3f54aeb95b13093f52d230444a7a225db70be7dd61bc1da4fd259556ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180127 Malicious code in teate-thy-py-wetosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b598c9697018b9cba0ada99da93a92a1b9d8986131d3217584bb091bf5c95f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-27368

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

CVE-2025-27368

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

Malicious code in manusidda-nusasta-baddanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9df85bb0c4a7992af59c80d57c603ea5a42763220e60716c5e0ab3bdd1a8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadodff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a25a79a9ac2ace18c052575b097087b5e6914f05f0663ee96071bca6ff3850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-musgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a531bc547de4839d883ae4e5da08ea69907f25d86eb88f8c4fa7ea7c39a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19449a929a10b93620292ad4667de9e865351b7ffde066e23c5611dc1b23cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c83d6c3ee64f4c78ed66946477e7aa9b010a114865fd5e2d7b06e8c53e21c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-odgafadaggagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208d4ef812f265171c4cb0c3c08c5321077b10f8b4067f599a2fbd7ffd906771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-asofauui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec55129f79f9109ec8047118c499aac27cc71fff739f16232746ee0e9bec09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008ba076dd8d09dd5fb5aad54c5be18ce782b89ea1012914435c1ec9dbc3c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba2f2aaed922c01f0737229da96e199a3404ff57ca4f3dca4cfba6b88546638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dufususu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06226fa9441155d5c14763b5c8a7f8c19efe260a6976a5abc4522ba8299c78e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b6c84ba80494032dc77193dded455f30b1dc1ebcf3eeeca115c8958ab6682e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivacavafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b969fc6851c997d6f3dbedecb5598968f019781f7d76e58983e9909ac5133a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihadsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f4cf1c7b555e5722895b09c2979751f127213ae96bba475d48d3c14494a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...