MAL-2025-71305 Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70900 Malicious code in stupid-white-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30764cbebfbf7e15b8de31dc3afc3171da4ae1d9e3288c4d0e52b2bc79a220c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67215 Malicious code in clean-coral-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e3cf14abf3c1519fbd6df29483251c0dd8f3582715751999b0b6be416de04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69039 Malicious code in keen-jade-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47723cc0ed0ed7fbcb54ae27dd08d5d820d18c5b480d0e637fe645b5b342a68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71100 Malicious code in thick-azure-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6a515c1cdeaa622ff6d65a926e5420e5fe539b6f876af84930be80aa06f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71572 Malicious code in whole-tan-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18218c87186f1c7ae6d21ef685efba2aa168d89ca3bab236cd4fabcaa4e8927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71792 Malicious code in zonal-white-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47adf7168924e74ee37df6128d2a433ea4dd6ce63f8b3970ac1946fe2f02b8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java

Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...

CVE-2025-42919

CVE-2025-42919 affects the SAP NetWeaver Application Server Java. The vulnerability is an information disclosure caused by improper restriction of path components, allowing an unauthenticated attacker to access internal metadata files by crafting URLs. The impact is partial confidentiality loss; ...

Malicious code in peculiar_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e82b950968edbfabbb877e5bcb671727e08119fdc32f9174e489da6a9f29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sambel68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea95b5e682af85440590c2fbadd3753558d823b6741dd0070cfd23c5448fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9151196e32795661e57656049c4c153d7a9c9345f3fc0d8f49ae1c87bac711a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-bakso46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2a0a4a82ae22390e39346ba5a9190da3d59c8f093b6d9100d3d3798996f8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d7514b4e8c530a8ea4cd8e95ce601959d90a2ec2c53ecbe2a17ad88fb5b590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af26a3c408fc0134a07ba822ecd188c4bff9a45a04871e9ff7351939bf724773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-papeda68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4338e508980ecf60ebc6b2008b36f311d278009ba3fc48090c471e599ddcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ketan53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47ffa4b63f6ccd1e4bfecd5a8034f37f96f1ab3dd81879d79a81a1c1112c33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02613536063a99defd7408bb3b99db78cf35ce490252ae4e90520496a4599fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...