CVE-2025-27368

creationtimestamp| type| source ---|---|--- 2025-11-12 19:42:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hfv756o52x...

EUVD-2025-143542

Malicious code in alvino-12 npm...

EUVD-2025-140433

Malicious code in lia-12 npm...

EUVD-2025-137094

Malicious code in riya-12 npm...

EUVD-2025-141533

Malicious code in hokage-12 npm...

EUVD-2025-141322

Malicious code in ira-12 npm...

MAL-2025-174950 Malicious code in ira-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f63ea25dfac1ea30fe5abc551f5b0675eb09ef0dffffe5e5c2f78966a1a38b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-25236

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbdk7fjn22...

CVE-2025-20378

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:53+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbdawn57h2...

CVE-2025-59491

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcudpvic2...

CVE-2025-59089

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:41+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcn3sbby2...

CVE-2025-2843

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:40+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcfismfq2 2025-11-12 20:02:18+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hgwbo7rdo2 2025-11-12...

CVE-2025-4619

creationtimestamp| type| source ---|---|--- 2025-11-12 17:06:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115537818777461067 2025-11-12 19:03:22+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5hdpkarcc2j 2025-11-12 20:17:22+00:00| seen|...

Malicious code in wulan-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a07a6df67cf18a4f8d90c1d979440c2afd50fe81f208dc212b4ef325d81cc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150137

Malicious code in tadashi-12-rwew npm...

EUVD-2025-146276

Malicious code in wulan-12 npm...

Malicious code in alvira-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50242b3ff6ba56e7b11ded851bad90d77556af5bb4d07b9decb4133adb0ace75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ada0bbec2a259795a002e32036b9943184f36939670543d0e20cce02162008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8439f7f095233664546be7808e441d9ed93454a90668ddccb8a7c67be7354162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a76b2f2c88cbd56512baf5c2e4c5b0cf6a102fc494ba293c784b8c53c3024b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...