SUSE CVE-2026-15544

A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

Malicious code in legislative-tomato-ox (npm)

Source: amazon-inspector 2187e43edb5c0591f9edf75e2528a37badeb2eb3e7cad97a73be9c132cd4f0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in just-tomato-swan (npm)

Source: amazon-inspector 1b49b879957372f901c553ab6a20037d0354e055a1991bfb2a9d9646e228f340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jolly-tomato-gull (npm)

Source: amazon-inspector 817c1c8d19d8331aa8dbbfcba77f8f894452c7626d379acde60f4e73fcff55ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intimate-tomato-parrot (npm)

Source: amazon-inspector f167a20685872395db398e3e1dbeae1bc9a98b0c62c1230d92667770efaacd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in injured-tomato-heron (npm)

Source: amazon-inspector 35ae5eb274b4d80d28b9ee7fa0288186bc8b36b03f276b550b35c6245d4435e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in initial-tomato-cardinal (npm)

Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inc-tomato-hoverfly (npm)

Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inadequate-tomato-ocelot (npm)

Source: amazon-inspector 1275eba662f513c3ec2830eae649e18671c78f183abc9bbd6fa8a586853b654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imaginative-tomato-wildfowl (npm)

Source: amazon-inspector 3f0d09e3cdaa334f96e0ebe8cc09e376ebf283b9c62cda5f380c5b527c170edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in horizontal-tomato-armadillo (npm)

Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in horrible-tomato-cicada (npm)

Source: amazon-inspector 7268b093a2d3489cfb805c8c68cc938c72b8ad52860b06c8dbac0868e9624fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in handsome-tomato-guanaco (npm)

Source: amazon-inspector 0e44d167f5947cd24727fa2afc629967c9be58275aae101e755620d98bece083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grim-tomato-moose (npm)

Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in fancy-tomato-pony (npm)

Source: amazon-inspector bd00a7a746476d5e8a788c9f497c5292b2111b276b43553caac5cb5fab0e7c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in extreme-tomato-sheep (npm)

Source: amazon-inspector 434b64f7185a484ffc47a97440b34f33d28fa65c4e85e2aa79ccba6b38055856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in extended-tomato-ermine (npm)

Source: amazon-inspector 3b8c07b0523004b8641ef70ddd846e2f9c69a058b95d4a24ab8fb38d0ca630dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in experimental-tomato-silkworm (npm)

Source: amazon-inspector f6f5b06d8dcff378015c73659cb952f6dea397f45f610c13eb7926022af864a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in exclusive-tomato-pinniped (npm)

Source: amazon-inspector aa6371565df2718b8a81b7b419dc1624b2c3f8d6b2afd8c719b82beebae8ffff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in excellent-tomato-gorilla (npm)

Source: amazon-inspector 8976376ac90d8acef8138ff1927d7e0f841c5d6c9346bf173d6e16ce77200dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...