Malicious code in flights-ilutag-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f0eb3d61a9e124687adee5da834db13d8ccf3db9b053e5138a36c8374a73d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-mieayam95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f1f942a57eb2b3e9736dba4d366220ea4f72307d1bfc8221e60899baa311cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Code injection

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...