EUVD-2025-55603

Malicious code in brave-coral-tuna npm...

EUVD-2025-55604

Malicious code in brave-blue-parrot npm...

Malicious code in brave-olive-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1eafc2af9d69410e8af87d9409020ce40ae41f85cd940554fd671437bd6905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55605

Malicious code in brave-amethyst-alligator npm...

EUVD-2025-55598

Malicious code in brave-pink-badger npm...

Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-coral-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f406273f28a62a85ee8d1b40aab451eb79f45b2631d03484a4db231a95a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55600

Malicious code in brave-harlequin-sheep npm...

Malicious code in brave-blue-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a3d8af2d905f4e3342da1bdd3b70ea17fe2ae13b5172149afa8c27872929b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55599

Malicious code in brave-olive-falcon npm...

EUVD-2025-55602

Malicious code in brave-green-vicuna npm...

EUVD-2025-55601

Malicious code in brave-harlequin-horse npm...

MAL-2025-67051 Malicious code in brave-pink-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c32a0fc57a8434a7c6bbbc20a0baf620522460e32a7d1cb2b6c935de2cc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67047 Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67046 Malicious code in brave-coral-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f406273f28a62a85ee8d1b40aab451eb79f45b2631d03484a4db231a95a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60522

Malicious code in bravesnailz3n npm...

MAL-2025-62116 Malicious code in brave_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae8bad58b14a033d15a09561374a10d4f0d0604d7832dfc98f54f8e5debe298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

EUVD-2025-37235

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...