CVE-2025-62519

creationtimestamp| type| source ---|---|--- 2025-11-15 10:03:29+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-fxm2-cmwj-qvx4 2025-11-17 17:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5tqivjzby2j 2026-01-05 20:06:24+00:00|...

GHSA-7WQ2-32H4-9HC9 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

CVE-2025-60693

creationtimestamp| type| source ---|---|--- 2025-11-13 18:17:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543760870697386 2026-03-13 15:12:34+00:00| seen| https://poliverso.org/objects/0477a01e-df887e70-aaa85e643f2fa245...

EUVD-2025-140427

Malicious code in lia-17 npm...

EUVD-2025-141316

Malicious code in ira-17 npm...

Malicious code in lia-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549780361b707bbfb17625aafad7dbae268897b388ee3d4727facb2a5703f818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7472aff56ddfb1ce95a8d5a53c20427f097992fa571d42e0bc118ea415dd024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143537

Malicious code in alvino-17 npm...

EUVD-2025-137084

Malicious code in riya-17 npm...

Malicious code in riya-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae8ecf4a1c7b89f037093ccfcf1272c76eccc6f121b74716149f3d57158413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141528

Malicious code in hokage-17 npm...

Malicious code in muklis-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649fa44f98f193564c5b4f8e600620be20f61f19144a8b0a190bc0e17fee54f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd77fdb2aaeac05ede70bcb749e3a3d76961739bfc53fc016e3a253ad1f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d062edebb3bea286f87330cac81ad32d31247ac596938fa1fc0febf4245e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04ef4aed788f6f2df40e883f890c1ea6cd87dd36b44cc1de2df9c287d033f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1543407d7afb3e06f90e4547a4b03900c1c84f7fd7b63804a3bdc765e7c26a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170541 Malicious code in wulan-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467df21ea57070336209fa67fd6293402ad891069de183c46740c41ce007745e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160800 Malicious code in muklis-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649fa44f98f193564c5b4f8e600620be20f61f19144a8b0a190bc0e17fee54f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51580b4a53e941f48471065c9e9c4a74e46f789d460f1da57d21f246ddf7392c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...