Malicious code in hitachi-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09083ac68c8083fc63d20fdc76d23a9b6a43565c93a950e80511f30cd1638f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178960 Malicious code in teaha-erws-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d691ee778305bbfa71946e4dc2b80fecf6fd16c86ec50910379b0e4cf4901ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174317 Malicious code in goodaan-nusafa-nfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c8dc3d01a03d66f2ec8e404c0466197f9b55402d0692307df4c45f65381742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174760 Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b27354b02ba43d5c80f4aa250b8523d0ae3c0de133efeb99b9514c56cd581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178117 Malicious code in polymer-tresd-tdfseh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28986c833c0c5610ccbe92405e5317d3d7dca500d588fb8f0213a083a2148823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

CVE-2025-27368

CVE-2025-27368 affects IBM OpenPages 9.0 and 9.1, where insufficient access control on certain OpenPages REST endpoints allows an authenticated user to view system metadata beyond their authorization. The issue stems from weaker than expected REST endpoint security, enabling information disclosur...

CVE-2025-27368 IBM OpenPages Information Disclosure

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interface of OpenPages. An authenticated user is able to obtain certain information about system metadata for areas beyond...

Malicious code in heres-matinla-uni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbf3f03f66688a592d061c6e46a97144ba27c05bc25ecd2532cc8fb407e23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maa-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fab6fedbd8f2b3da0685d7a81ca6b7ebe8dfc26c641744ec381655edd3d7f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-hogu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba11297848be3e78b90ac58afe06d6b281fd6ac70f31eeab792a324d6573101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-manafafoas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb20d7db6915aa34868520ab13f74b0a670fa8375382ecea2f21d3f982f5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gosn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28750ec37e5d0e8b7859fd0c4c2da8cec435e843c0c6816e4b19246f1834e64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc875ae107382021101fa9d984996d62201e4370d5e2d9e3a109206b043e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nuafiagof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3aba404ed67fa2768224412d2e2a7bdfdf76096e6b7c179d726fa4d6e70ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-mala-unta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abdbb8bddbc74b422e1ad1c9f3115997403fb9f4697baa831cb190c402661a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeeaa541b563184078e001653b9d6fe3526f0f4e0f7c7c212021767dfa58d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munafpipoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709615b810990a5d5ac1299d8358c9c4ccec0a283cccaeea5246b25968bfd37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...