MAL-2025-156546 Malicious code in intan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa84fb1129638e148321b5021169e5d2abae7f5e5ace4ac033e00779cebc383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152477 Malicious code in alvira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545bf23405402bf08e2f9020d239e33ce45c0b7ca18492ff9ffee07d48feeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154320 Malicious code in dia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_tarsier_lime-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed17210ef864438c25bd29a49aa4c268df89acef2e4956c1d13e13095251a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74225

Malicious code in softgoatbeige-37 npm...

EUVD-2025-74844

Malicious code in broadtarsierlime-37 npm...

EUVD-2025-74619

Malicious code in futuregrouserose-37 npm...

EUVD-2025-74066

Malicious code in yearningamphibianplum-37 npm...

EUVD-2025-74262

Malicious code in severegrousered-37 npm...

MAL-2025-112089 Malicious code in melodic_stingray_coral-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de13888f23904dada75f268af0c06c52b3c7a7feb78c0aebd3b31e32d454373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64450

creationtimestamp| type| source ---|---|--- 2025-11-05 06:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ufws6gn32s...

GHSA-RJ5C-58RQ-J5G5

creationtimestamp| type| source ---|---|--- 2025-10-28 22:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454183590681546...

CVE-2025-26781

creationtimestamp| type| source ---|---|--- 2025-10-20 15:43:37+00:00| seen| Telegram/2lOkWRnHw2Y0IIfE17YUTtFZtJVPk0exmThpQhnxo-8ci98...

CVE-2024-56143

creationtimestamp| type| source ---|---|--- 2025-10-16 15:07:22+00:00| published-proof-of-concept| https://github.com/strapi/strapi/security/advisories/GHSA-495j-h493-42q2 2025-10-17 14:37:37+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3fiqfxa6d24...

EUVD-2015-2971

Malware in sbrugna...

CVE-2025-57636

creationtimestamp| type| source ---|---|--- 2025-09-23 19:53:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115255359319842431...

CVE-2025-42961

creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...

CVE-2025-7603

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-10032

creationtimestamp| type| source ---|---|--- 2025-09-06 15:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly6ilhcl352t...

CVE-2025-49039

creationtimestamp| type| source ---|---|--- 2025-08-27 04:15:37+00:00| seen| Telegram/DCp76HAWpWj6vrUD58hWqvkawHFbT8cEjUoCKH-p5CYlk...