EUVD-2025-137096

Malicious code in riya-11 npm...

EUVD-2025-135795

Malicious code in teaha-erws-11 npm...

Malicious code in ira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fd4b9b1fb6eac49a4808c74ba9daece8be0478d080719370ad186c08e290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-25236

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbdk7fjn22...

CVE-2025-20378

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:53+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbdawn57h2...

CVE-2025-59491

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcudpvic2...

CVE-2025-59089

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:41+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcn3sbby2...

CVE-2025-2843

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:40+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcfismfq2 2025-11-12 20:02:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hgwbo7rdo2 2025-11-12...

CVE-2025-4619

creationtimestamp| type| source ---|---|--- 2025-11-12 17:06:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115537818777461067 2025-11-12 19:03:22+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5hdpkarcc2j 2025-11-12 20:17:22+00:00| seen|...

Malicious code in ita-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb21cd5054e42f91045e07435fafa2897c93304e4bd44f212ee351491f79aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146234

Malicious code in yuda-11 npm...

Malicious code in billa-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d3718274f60d61a79d49d59d7ceff1f27b85a4482a7948d2f30055e247441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff1ff15a1fb77cecdf29a3eb784aea3aeed5f316b69889265911befceab3f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e7d0030aea96a4bf934407d3cc7b11e6b90856b7ba8024bcc01c7f6fac0db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160794 Malicious code in muklis-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d4d0e23b25a6076de7ecd37c2c1969b2382aefdb3d30660a83c588f6ab98fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481c53e5b2a6da6253dc281e33be64b0bef3094aa40725090db14f32c997a38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147453

Malicious code in tusaasya-11-sds npm...

MAL-2025-152449 Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...