CVE-2024-45370

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:17+00:00| seen| https://infosec.place/objects/1c4264b9-562c-4dcd-865b-c1e0bc3af7a8...

CVE-2025-66423

creationtimestamp| type| source ---|---|--- 2025-11-30 04:34:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115636780361246079...

CVE-2025-65647

creationtimestamp| type| source ---|---|--- 2025-11-25 22:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ifdxiu6g2s...

Malicious code in alvino-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbedbc6b3a8dcd11b9ce587143d8b15009bc71c2aaf7f0f4c631c6a88de5e11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141513

Malicious code in hokage-30 npm...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141301

Malicious code in ira-30 npm...

Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d25c4211688d818f181dbd2f365a0c63a7f6c7fad00f3b268066f258216800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172779 Malicious code in alvino-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbedbc6b3a8dcd11b9ce587143d8b15009bc71c2aaf7f0f4c631c6a88de5e11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143524

Malicious code in alvino-30 npm...

EUVD-2025-140412

Malicious code in lia-30 npm...

Malicious code in lia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01131e9662f4420413572611a39a689960a9fe85346bb280a107f19155ff84b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137054

Malicious code in riya-30 npm...

Malicious code in ilop-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8a1b1bcd20803476b599e569e0fb84399651d47d1310b64291d7acac76d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152070 Malicious code in aji-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db5535e4375c638750eee92e0b3a7c5b6269d3933f115a54d2ff7fa6140eafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157511 Malicious code in kentung-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196e8e14ec3def4e9234ccb43f62ef3450dbbb4c3436bd98fc062a496ae43af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540271e5dd080ff2d555a79bebde1b0969fd136fd9681b1f3f0a23fe250ab7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec05db361c888a679fee915133154fca82f11b99149d18f5a51a6c1e4fd7a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0928461b6151e0010218d995115927e0e3d65fb22c60c100811c9a09802b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...