3591 matches found
MAL-2025-174967 Malicious code in ira-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ad9fbeeeb5fe17484e58e6bf4b80cc7c32eb3d64d1fc9c9e99a9d5e934e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172777 Malicious code in alvino-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
siddheshtea (=1.1.6) potentially affected by unknown CVE via manda-28 (=1.0.0)
manda-28 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-28 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159624...
Malicious code in pitra-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4893d56a3b34ac1208bce6bc217cb50f4cbbe1df9fb496fab4d3b7128d197ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kentung-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664a4faccbe937ca90c56f7eb08e5254f330ae5ab46d84f6ab42dbde9136b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in manda-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4500e1e683f508f01c74f0fe9148f84bb3b0aead480a3e1e6dbcf85f8e284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-157508 Malicious code in kentung-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664a4faccbe937ca90c56f7eb08e5254f330ae5ab46d84f6ab42dbde9136b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-156537 Malicious code in intan-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cinta-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fa2d7c1c0f9d4f6c49abd834316eca9ac82ecc0bf97841524b2febc9798c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bitha-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62cd656c13789eb16bf2b4a7c43f7d35b0b890d456ef9214fc670ddf4fadb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ruji-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25684c13a6cd705d15ccee4f7404edf01fc9e2b0a40a3220d9006a59527652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
siddheshtea (=1.1.6) potentially affected by unknown CVE via ruji-28 (=1.0.0)
ruji-28 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-28 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165253...
Malicious code in wulan-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b42b13361a1ccd025c0a621d7f2b78d04cfed33fb34c150a254557246d53c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fauzi-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7beff86eddd5a9a477b696907126110feaf9e8c93575f339668c630c9d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aji-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61152c02a6cbf452e9a7304e7df3523ab9931c0b72e7c2cb78c6a9645221ec8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155583 Malicious code in hafiz-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616af81b86d0fc2cd48de0375834fd55c74e1288063aea2b60e5d17fb1e837c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170552 Malicious code in wulan-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b42b13361a1ccd025c0a621d7f2b78d04cfed33fb34c150a254557246d53c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165253 Malicious code in ruji-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25684c13a6cd705d15ccee4f7404edf01fc9e2b0a40a3220d9006a59527652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-62482
creationtimestamp| type| source ---|---|--- 2025-11-11 11:28:54+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5dztyqpqt26 2025-11-13 15:37:40+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5jimis25oy2...