CVE-2025-42884

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...

Malicious code in strict-crimson-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83796d804f3ed5ccaed1790eafea045b3b054603a40d0718b3fb5cf72aff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70184 Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-miebogor68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a37b961fcb4ec9fa97c2ea2fea874a1caaaed16b15f5bfe522ac558007942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cba47d5bed1917dbae0d59417ccca8dbc27333a3f85ce9cbcaf1adaecfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63259 Malicious code in hadianto-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bbe82322a1764fa61795890807aaed7773463e77e1b6f897bb368be929549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63761 Malicious code in joni-kue76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd35e9cc3d662ce998a268541455dd1e7f1e1a3a3f37e8499137ef43caa0926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66159 Malicious code in wibowo-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d6d90ef61c72754a6fb679385c6fb04c10325311f1b58bad8b9d73881b8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64456 Malicious code in nana-mangut81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e61d674e3e115dd1c418803a11e116a235a10ff044bb90f56f65802299b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...

SAP NetWeaver Enterprise Portal 安全漏洞

SAP NetWeaver Enterprise Portal is a Web front-end component of SAP NetWeaver from SAP, Germany. A security vulnerability exists in SAP NetWeaver Enterprise Portal that originates from an unauthenticated attacker being able to inject JNDI environment properties or pass URLs used during a JNDI...

PT-2025-46225

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal affected versions not specified Description An unauthenticated attacker can inject JNDI environment properties or provide a URL during JNDI lookup operations. This could allow access to an unintended JNDI...

MAL-2025-60817 Malicious code in marine_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75330045da18607cb3fc0cff327b0a9949892d5e686bd7de39e1a8051c2c864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76ef207e84f9cf657e92bab51ec5b850ffd1bb57aeebf545c14fac9b9aa9c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59064 Malicious code in udin-miebogor7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f55788754d77bf7f0ceb1cacecdec09e38e3c6cb89abb3e326caa180363817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55340 Malicious code in bayu-rangginang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f60c70a2bc777c563f0866c609be7bdbc0b22abb52be95579a1d015b8530f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56941 Malicious code in iwan-rawon20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079b547834d5527507baa2d57771289cfd846f8d1f396b480346195ee577d7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55046 Malicious code in accurate_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b98300ba19497f9105743fc49a9c726671f0c9a4537074c8c19061611ff97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56525 Malicious code in gita-papeda11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300695bdcbc10506908f1b34bdcb65908fb8b880ee50eab772b76ef8fdd9be5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...