MAL-2025-74485 Malicious code in mulyono-rendang76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f2ad676385bfd68d7584320c9c46d5e885c5dd805d6cc06b56489e410ff83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72704 Malicious code in eko-kripik37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448fb886904ff27c1be40f4ed58344b982b7214e2312db13c84351a9a13cac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73055 Malicious code in galih-serabi55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c3630bee7159788a4bacdac9cb444cc87e2d30d41fd2fc9865de7da5a1aad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72969 Malicious code in fitri-gorengan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29654a8dbdfc36f69342f19a05d768f00d9d392f1ba63efda421bc79ea240c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74747 Malicious code in ogi-nasiuduk45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38cc8f7fcf21e0c3690d3f41c7e0643505d247ece9a4237230d580e7bc856a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73033 Malicious code in galih-kue87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d102d6875d4030abec4b0ae9ac8cf84aeea558c7583760209da59d62b6f7228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75547 Malicious code in surya-sasag59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a709a5d5c8a080894795d9cc3925010e14af9e46a5435273a973da0ea3688672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71886 Malicious code in agus-martabak70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722af7dcd90e37ffaae6dc37417d882455f1e06b77168796f2bda8180a27109a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42919

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

Malicious code in cooing-rose-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53339d445a887cc17c7073bb86fae58ddfa55e64920f44ec0c8681d97a276e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9fa79a23d697727fd38892a3fec012b292541c3c9ba468beebdb90ff64a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-rose-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a79522cea948231fa43638c4e02b0967b64522b2d2fc96bea075100fb1f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-black-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a3cd036500e2c1ba1c2d1c46c4323b46dff5f713f588dbd44cd90cb0b3042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain-amber-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871cf67ec2c5bc45b9d63602092fbdf443082c0888bddc31a40dd23c3272527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d367a7652de0497384529f73d29ebc0c9a72e11de0d4b99b21ea3cd0204ced4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-amber-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c214348716d73ee2271898d203b2fe300efd95831aa24766074fea8f365783b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...