CVE-2025-15136

creationtimestamp| type| source ---|---|--- 2025-12-27 15:35:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115792262490505544 2025-12-28 13:37:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2gxepi5e2q 2025-12-29 02:27:47+00:00| seen|...

CVE-2025-8075

creationtimestamp| type| source ---|---|--- 2025-12-26 09:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauwwgf4hn2x 2025-12-26 09:07:43+00:00| seen| https://bsky.app/profile/potato.software/post/3mauwwh544e2r 2026-01-07 19:08:58+00:00| seen|...

CVE-2025-67899

creationtimestamp| type| source ---|---|--- 2025-12-15 19:35:51+00:00| seen| https://seclists.org/oss-sec/2025/q4/277 2025-12-20 02:01:34+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4d6dt3p2l 2025-12-21 10:46:14+00:00| seen|...

EUVD-2025-137044

Malicious code in riya-35 npm...

EUVD-2025-143519

Malicious code in alvino-35 npm...

Malicious code in riya-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a888481bcacd2689e7a93a3ba9b2f71bfc8af820095623ad74b305b604be01dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140407

Malicious code in lia-35 npm...

EUVD-2025-141507

Malicious code in hokage-35 npm...

MAL-2025-178316 Malicious code in riya-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a888481bcacd2689e7a93a3ba9b2f71bfc8af820095623ad74b305b604be01dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e31098245e475c69d3ac155a5d1340448da21778374cb8c5d09a9cbf5feedf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c15bfe05277da4eddb13944566d3d98959ed0912121a735d78d9ff3dfd505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc70b03bc5bdcc968a51adb9648c84bd5229176b85488ba5dc55b9abb0c95c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165261 Malicious code in ruji-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb9399ae4ef6bf0f59e31d5858e8a121c37a8cfba445b9766fb7e05b54eb0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152475 Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164305 Malicious code in pitra-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f0d11e4aa9c217d4dfc651c4480ddf25aecc009ba74f91302a21db5e786ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ea17fcf3a083f66ba8270a37318c0ddd7f76c088fd83a2b353c79740649168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceed1a213f0e85ca4c3d612060494b99514634b633698519b451f26ddd8dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba2ff804f3f496d65b1caa2c1a28a694eb0e1b1dae290d182c26c00115aa9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef3d4d6b9e4e9ea19cb884050adfc3aa2516f5a24ee26bc89c3b0c1cb893e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146252

Malicious code in wulan-35 npm...