Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1146f1fd9fbbbada6f2d13cfb8f56ac1b5bc1f6c7394016baee6bebeb0a581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170538 Malicious code in wulan-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f86f00e11ce640fcc8a63dbee2fd86938d5ac9a30f8cfde81e5683ea30a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146274

Malicious code in wulan-14 npm...

CVE-2024-57695

creationtimestamp| type| source ---|---|--- 2025-11-11 15:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ehvfw23r2n 2025-11-11 17:41:29+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eon25pjmp2...

EUVD-2025-74587

Malicious code in hardbandicootcrimson-14 npm...

EUVD-2025-74461

Malicious code in metropolitanmackerelsalmon-14 npm...

EUVD-2025-74913

Malicious code in acceptedslothfuchsia-14 npm...

EUVD-2025-74867

Malicious code in badlobstergreen-14 npm...

MAL-2025-111965 Malicious code in hard_bandicoot_crimson-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585a72d52b4d5d389e55b1a52dd55e5d7015b0be8de5a4e871e6add59f9eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77490

Malicious code in trickykingfishercrimson-14 npm...

Malicious code in constant_peacock_emerald-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ee0a0d9c8c2847ba98f2c7cfe72f66a973abc50b9425dec71962bb81a916f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64529

creationtimestamp| type| source ---|---|--- 2025-11-11 01:31:14+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cygmzzw552...

CVE-2025-4952

creationtimestamp| type| source ---|---|--- 2025-10-31 14:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4iontmsdz2w...

AZL-69302 CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

GHSA-RJ5C-58RQ-J5G5

creationtimestamp| type| source ---|---|--- 2025-10-28 22:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454183590681546...

CVE-2025-40077

creationtimestamp| type| source ---|---|--- 2025-10-28 14:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4b6yv5bi22p 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-11989

creationtimestamp| type| source ---|---|--- 2025-10-28 14:42:09+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m4b64mdxbs2v...

CVE-2025-53855

creationtimestamp| type| source ---|---|--- 2025-10-28 14:00:05+00:00| seen| https://infosec.place/objects/9fff3064-11ee-49ec-8138-72ef94d4d349...

CVE-2025-62807

creationtimestamp| type| source ---|---|--- 2025-10-23 06:47:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3tratpsl62h...