Malicious code in fajar-sambalado85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9030c3444688ed363a4cf20b6259f76c0875d8e04ab3d350a3000ac1835cf118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasicampur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac2f06f33352ecdd1a7fefc1df7c855fc7867e3fd6512021d1bc8f385b1c6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7554d54efd87b6776fe4de016f3fdff91bde178e5f84fb5aa7416540cfedd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76369 Malicious code in yanti-klanting21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a777bb9c92f0ba8ece4dc8d892d884314d9d3570fa1e2078ff842273ef438c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-soto14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4881c4f4da7493cb6e59947c2320debf3a76d77ba1e00c91e773e3867e0f88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72749 Malicious code in erick-kepok32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eb4d65adda9c1d663e570468220f9de8e1db95afc53182a889423271558364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74908 Malicious code in patria-sate87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75ec98058ef003485f1215fa6a82d200dfe9ecc1eccd00bd8ec18a7624fdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-brengkes51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489fb71884438c9f2e00aedbad3221de1c49990de7148c6fc3801fabefc53618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73358 Malicious code in hanafi-wajit54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c01dbb6dcb3f168ba585f8e60ad1c6bd2f8e9a443274e2e3f0125a61b34851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...

Malicious code in strict-crimson-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83796d804f3ed5ccaed1790eafea045b3b054603a40d0718b3fb5cf72aff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70184 Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cba47d5bed1917dbae0d59417ccca8dbc27333a3f85ce9cbcaf1adaecfbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-miebogor68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a37b961fcb4ec9fa97c2ea2fea874a1caaaed16b15f5bfe522ac558007942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66159 Malicious code in wibowo-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d6d90ef61c72754a6fb679385c6fb04c10325311f1b58bad8b9d73881b8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64456 Malicious code in nana-mangut81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e61d674e3e115dd1c418803a11e116a235a10ff044bb90f56f65802299b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63259 Malicious code in hadianto-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bbe82322a1764fa61795890807aaed7773463e77e1b6f897bb368be929549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63761 Malicious code in joni-kue76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd35e9cc3d662ce998a268541455dd1e7f1e1a3a3f37e8499137ef43caa0926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...