MAL-2025-175235 Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176368 Malicious code in nokire-kushina45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a870f9397df85c40bd512bfb3b22eb4e45f4aba42a1564db2af01ea40f5a1a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173133 Malicious code in budi-me-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf99b0a5ec0798c75c092bbc7a09b34448b9f7dd687289f02c651303d8b1a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178195 Malicious code in rindaman-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b6ea4f31428a239d994a36d95b7a90fa0a45ea0c8d2374cdbe366e450f7345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174674 Malicious code in hitachi-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65605f465179cb163279ea9dd8e053eeab352e10872c0362b06d2e751a10ef07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172999 Malicious code in anidta-hauli-mudisali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a741e55406451f7974ce3d46e537940e4aee551a2494354fb4b3fea0109bd9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174760 Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176401 Malicious code in nokire-nakao11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67c76fc4087adf7f901789c83797ed9ec73edae3769c8f7b3b382162aee9586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172839 Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172868 Malicious code in ananda-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa155cc86240ca8ba1ea2b62b9ea36e2835bf85450e68f3703f2b45b6b776d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178960 Malicious code in teaha-erws-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d691ee778305bbfa71946e4dc2b80fecf6fd16c86ec50910379b0e4cf4901ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

CVE-2025-27368

CVE-2025-27368 affects IBM OpenPages 9.0 and 9.1, where insufficient access control on certain OpenPages REST endpoints allows an authenticated user to view system metadata beyond their authorization. The issue stems from weaker than expected REST endpoint security, enabling information disclosur...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

Malicious code in augis-pomdoui9r-manafafoas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb20d7db6915aa34868520ab13f74b0a670fa8375382ecea2f21d3f982f5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maa-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fab6fedbd8f2b3da0685d7a81ca6b7ebe8dfc26c641744ec381655edd3d7f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-hogu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba11297848be3e78b90ac58afe06d6b281fd6ac70f31eeab792a324d6573101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gosn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28750ec37e5d0e8b7859fd0c4c2da8cec435e843c0c6816e4b19246f1834e64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbf3f03f66688a592d061c6e46a97144ba27c05bc25ecd2532cc8fb407e23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc875ae107382021101fa9d984996d62201e4370d5e2d9e3a109206b043e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...