Malicious code in cinta-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e2e9efa44bb7930d274fb65b10f0e77c909edbc87e02802737bbae9a1bf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154039 Malicious code in cinta-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e2e9efa44bb7930d274fb65b10f0e77c909edbc87e02802737bbae9a1bf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa6dd4272d6b65319a595653a03f6955f0bcb19e11e1ccc34b51e95ef67af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 688bcebf5620329fe0413b59303c6d08e6534e18f1a1b2f88d139504566bc019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ff8d270a1cd7af0ebcf46003566d9f93a02a132b25fce1089136929cca4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdbc6cb7a51c9395a270bc996583095173bb35f800aab7109e8502e4ff35c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146233

Malicious code in yuda-12 npm...

Malicious code in bitha-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d14978382295fb8d0aaa1369e7852d7a02c061375fe82ca655defc11753ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701f1ae500bda1b153c8ef18aac41c7ed950e3d64647e12727a679af20562911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170579 Malicious code in yuda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56f76c6dd58df61d56ec8d833d11e89bc2a14011a68bb22c1f5602e8278cb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155989 Malicious code in icha-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa6dd4272d6b65319a595653a03f6955f0bcb19e11e1ccc34b51e95ef67af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170536 Malicious code in wulan-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a07a6df67cf18a4f8d90c1d979440c2afd50fe81f208dc212b4ef325d81cc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-12-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7230e1c8f91ec2cac4ee8f0a379d1f141e8718b40ae2d03af93070da3181ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-12-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d85862c1466eaa8848e58feef5970d37b0e3e7d48c8e91e237f8ed133add788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0950380f549807d5b53b4c3bcffbb23484b9cc813cfe917cf3742a97021a3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147452

Malicious code in tusaasya-12-sds npm...

MAL-2025-156261 Malicious code in ilop-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a76b2f2c88cbd56512baf5c2e4c5b0cf6a102fc494ba293c784b8c53c3024b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164881 Malicious code in rita-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78c8584fdfeb6c68e9878118e07cb2b9622b03b8d46b64cf4ccb96a65d8c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40171

creationtimestamp| type| source ---|---|--- 2025-11-12 12:36:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5go4gojrl2q 2025-11-12 14:01:00+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsrrzxhpd2 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40174

creationtimestamp| type| source ---|---|--- 2025-11-12 12:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gntib3lq2w 2025-11-12 14:01:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gss62ksdd2...