CVE-2025-12003

creationtimestamp| type| source ---|---|--- 2025-11-25 09:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gznug73x2n 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751 2025-11-28 07:46:12+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3m6ofchywas2l...

EUVD-2025-143515

Malicious code in alvino-39 npm...

EUVD-2025-141502

Malicious code in hokage-39 npm...

EUVD-2025-141292

Malicious code in ira-39 npm...

EUVD-2025-137036

Malicious code in riya-39 npm...

EUVD-2025-140403

Malicious code in lia-39 npm...

Malicious code in pitra-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2d5ada514c5bc253567037e0eb0219d5b911b3bd5d6edb5d7a0e83dde11f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac6384ab71b681c5ecff81f098b051a32bf6ee4237b933fbc7f38cdad672af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-39 (1.0.0)

muklis-39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160823...

MAL-2025-156548 Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164309 Malicious code in pitra-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2d5ada514c5bc253567037e0eb0219d5b911b3bd5d6edb5d7a0e83dde11f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68aae1fcb3f6dc216139ad491e455d2b4cd00ce177e32690d6358bea55e5af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920dd8002ba26f8d2c4a8ed0501d3f21b13897a1e5febe8cb88fcd263d6754d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fd740aa0de337f4c1ad16ca997ce2ea56fad4b137219af070b681e55d211d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146248

Malicious code in wulan-39 npm...

Malicious code in rita-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8669ab3f626cbe2fd3fdc7c2470d4e8c89916a99a44ee9784eea6b1d0487f237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...