IBM Concert 安全漏洞

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an information disclosure vulnerability that stems from uncontrolled recursive directory replication,...

Rallly 安全漏洞

Rallly is a scheduling and collaboration tool from Luke Vella Individual Developer designed to make it easier to organize events and meetings. A security vulnerability exists in Rallly versions prior to 4.5.4 that stems from the presence of an insecure direct object reference in the vote...

Malicious code in luna-cordelia-blackhole-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4671bed4986784ce341d0ba6709ba439dfb5c96942dd8001c1ab0c963fb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189820 Malicious code in tau-mu-good-beta-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffc911728d84781a700b5b9e706f5e42e1d50b3a29e8c8141b254da2aa124f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184456 Malicious code in modiov-kin-afudsaczubfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd48b0d2620a33f49c71f7e692a7bfd04f314116ceb2461c5f9f5acae9a515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nejnaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408a852eff89e5c3d287c0bacccc7825cd4b1e30aabc445a4c60d44c679087a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178239 Malicious code in rindaman-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60547edb86c0f57484b7fd146562d45d1046645cc15461b4aabfa418623a8786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc4c48caf099951306f163926f2e18a1fc0c85f42e7330e65802a78584ebc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170849 Malicious code in amjadkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec16d50f9c5183f58a490a7b507d83f638bd582edba58b672073513d94e32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171700 Malicious code in orlabyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38373b2545c631b5d979b044762b060e20b5351bc1ad9c0d91d6844c188420b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alexandermartin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385eb2955cf96e2f3a5a27796c5ab941f038cb9d56b0d77b31045319e243e176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6ffa6fe7cd14b9f6af57d167725dfe1bc1418c52eb62cf4333bd154404ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164175 Malicious code in pilka-lniu-kanukakili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56857214d67b3876f84e72d99d7c134f33200bf5e20012bb3b739e9b3787af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168984 Malicious code in tehah-mansaat-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb68f43e462a4c368e122b0abe6de6821eb5b9f506214bb37f46a2a9e002374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141165 Malicious code in corvus-puppeteer-eslint-config-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a339ee93474eeaf05bb0ccc6e79ce00d741a53f99c8a1e41fed151288239494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136337 Malicious code in putra-rangi65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde1d3709716cd17e7f4a8502eb3310b6c8f612f0052871f029b4d0b88bc75fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305e656cbe7ee90804c1b272040fa7e7a0b2466b2e61264f4cbc2dad61a19f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124925 Malicious code in ambitious_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa628d9fe8760659748736213a72ad780bc282dca9d0c0b106ea02c5981bf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...