EUVD-2025-143521

Malicious code in alvino-33 npm...

EUVD-2025-141298

Malicious code in ira-33 npm...

Malicious code in hafiz-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3a6f61e0e88cf5414d4ee7c24671ed05f4f23025d32e1df09db75e3b7a77a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146254

Malicious code in wulan-33 npm...

Malicious code in billa-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e064ad7775f6eca2c5f2bc120d076c9b1b22e351a8b0aa44bbeb715db81c9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09aaa62a9c7cc34076e0a61f6ab2e18097411e52d55668753bad34c8e8cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac0d6f4adcaffccb10590d4c50f9f47921c9621c9d926f8e51950b1452a683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dad3e8921af49a14c0723f60a9dd0ceacb98df30cd1633378daa1cf22097b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e9cbb9ad8714296028b1256992e40ca9f114afdd19a78bba9b5eb0b88852be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a12aa0d66e5b1c890849a22f7e05be96006d78cd9d0dcff24b8c413988e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94598839e52530969c0f1168a24fbdea695055304cbbbfd2865cfaded98aa75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153683 Malicious code in billa-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e064ad7775f6eca2c5f2bc120d076c9b1b22e351a8b0aa44bbeb715db81c9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156542 Malicious code in intan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63db5031e9198b6862ea3c1e7025e948f1d1ea144f7a405bb29e83fe5eaf7bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a357b449d33275aafbaee155b1658641cbb7cc3956bf69d0a83013fa79a790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67fbe7a4f8b638084e2af409bab3d7f493f61d9b604d3158517d7514d27c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153829 Malicious code in bitha-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5926add183e75e655b7d579830aacc4f49caa9f3127ac91db7ffc83ffff5413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0536402d4a33505f70299bc436b276e4e7af03fc650256073d060a36b5c773a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9227

creationtimestamp| type| source ---|---|--- 2025-11-11 15:33:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ehk2v7do2b 2025-11-11 17:41:28+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eomqrbf6t2...

EUVD-2025-74679

Malicious code in excellenteagleblue-33 npm...

Malicious code in brainy_octopus_gray-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420f7e1e19a0bb59666af86b1337b6aa3f58b953153c9ad7ea81b3dd908c8ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...