Malicious code in fauzi-donat21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2d46b866f384c90f4a0d64ba2e59695d3980d6616ec3a54637d6310e405b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113572 Malicious code in eko-kripik16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9c7258e8640b5d3e7724eb5c5ab3c69df9112993ca40bb26a718c4927f70e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116217 Malicious code in okta-brengkes63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb0e8b64d97488e5c29ad167a4a3734c400a6ce31a2fefb1512ac8eab9de9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113680 Malicious code in erick-ongol-ongol11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb687d6caa5318afa2b6430ae78c916b476dee2d8340232635a9b50022a5ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115103 Malicious code in joni-klentik18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91862daf48892440f87e0087e686d873e3c7343f1a606bedd669be45e72c08aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117607 Malicious code in udin-tek3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a267990633e70275819dd859fdef05a78371cd1ca1f4fc6403409f95e58ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114558 Malicious code in hanafi-serimuka21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0dde7934eb8bd43448eea58c4278b02c386b40f28750667e14f2b8758c2fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114759 Malicious code in indah-gaplek57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f34296b2887a3129c54b3918429e309702c50baa24316ee24888e4ed5ce26ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116764 Malicious code in rifqi-jus79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8681bb6dac38cc439b8e33327f4c986f8d0a3697ba2c976fdd2837cb20aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115425 Malicious code in light_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126775fb1a278cb3f185cd8fac2c1dcefb99c24c4ef27f82dde879139e89e4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117860 Malicious code in vida-oncom54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f0bfc01761a56d3555b4046f9115ea114c090221011d619e8cc9c8ae7900be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115786 Malicious code in maya-mendoan69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe422cc829370817ee0311bdcff44660c389b86fecc9d9108bf5de2eabc5e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115206 Malicious code in kresna-lepet82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c76b3cc68014d2a36028a49ca032b1eab04d4721a5c360a6d9eaf100fad08bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113053 Malicious code in cici-tahutek71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d46ab13263ab7cd7000c4cf686652a33fe89cbd919a5820a200ccacca9aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117074 Malicious code in sinta-miebogor86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4b6606d7a0ba5e384cdd83a3f633c3323988807385ad0a3d374517a625eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118403 Malicious code in zain-teh43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accf7759e654de295cf34e7f302a488cc863e0df776d301ef404363728b75d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115064 Malicious code in joko-sambel52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e871e2b0f51f214a133fbb48f837a962dfeffc96c36138d9d9c26e9a9f2b2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117501 Malicious code in tomi-pecel99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fe669f84ee160b96ce66b6c62f40a3478123f463a108dd9b83124d8951b165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

Security Bulletin: IBM OpenPages Vulnerable to Information Disclosure (CVE-2025-27368)

Summary Application API vulnerability that exposes metadata for configurable fields due to insufficient access control checks in IBM OpenPages has been addressed. Vulnerability Details CVEID:CVE-2025-27368 DESCRIPTION: IBM OpenPages is vulnerable to information disclosure of sensitive information...