Malicious code in ilop-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7be69b96f6bbf6d40e76da4028972b878d9f7c2843e6a6a192d2b7b4a4bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a21edbe52e12f9452a2ab2c2e4576ea38cfdb2cfb5243519e715e3635200c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cb4276a83dd41e74237c02c2fc84d974b10525946099f41b2331c82ce9511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157528 Malicious code in kentung-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6006f5242e397758ed2a286c28886832bfd6fcd39f41e3477292e672046a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74357

Malicious code in popularkrillaqua-46 npm...

EUVD-2025-74750

Malicious code in desirableswanbronze-46 npm...

EUVD-2025-74189

Malicious code in stupidhippopotamustan-46 npm...

Malicious code in unchanged_crane_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6688c417c1e3b943de3df667521579a13ffec5413882fd37cc5fb57f009be78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74381

Malicious code in parentalfinchblush-46 npm...

Malicious code in stuck_wallaby_silver-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f232de6acc496afab5fa7432bbe1afcfe29a31bb5f8dd200ef39ccbe34e7dc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74393

Malicious code in orthodoxpenguinbeige-46 npm...

EUVD-2025-77674

Malicious code in chroniccowcoral-46 npm...

CVE-2025-46422

creationtimestamp| type| source ---|---|--- 2025-10-30 15:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gco6s5vb26...

CVE-2025-54654

creationtimestamp| type| source ---|---|--- 2025-10-11 03:12:46+00:00| seen| Telegram/Dx2M-KA8U5fejO7GzUyspVsnZEQmYTNwvtjn3BkbisGEd3A...

CVE-2023-53395

creationtimestamp| type| source ---|---|--- 2025-09-18 14:46:58+00:00| seen| https://bsky.app/profile/potato.software/post/3lz4lqhad4w2q...

CVE-2025-10402

creationtimestamp| type| source ---|---|--- 2025-09-14 16:57:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysr6nvjhu2c...

CVE-2025-53933

creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:46+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-58064

Summary: CKEditor 5 (ckeditor5 and ckeditor5-clipboard) has an XSS vulnerability in certain clipboard-related configurations. Vulnerable versions are 46.0.0–46.0.2 and 44.2.0–45.2.1; exploitation requires a specific user action and a particularly configured editor. The issue arises when the HTML ...

CVE-2025-9681

creationtimestamp| type| source ---|---|--- 2025-08-30 08:46:58+00:00| seen| https://bsky.app/profile/potato.software/post/3lxm6r7p7wo2j 2025-08-30 12:40:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxmls75dwc2z...