EUVD-2025-103138

Malicious code in optimisticcarpz3n npm...

Malicious code in cheerful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131706 Malicious code in zain-lapis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d7ba7c23ac352f0de3cc9c1c67645105e9fae48151f3fb1fcc1f973e16029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105703

Malicious code in drivingplatypusz3n npm...

EUVD-2025-88652

Malicious code in stripedflyingfishz3n npm...

EUVD-2025-89599

Malicious code in oktafian-rujak95-miaww npm...

EUVD-2025-87948

Malicious code in vocationalcarpz3n npm...

EUVD-2025-89505

Malicious code in patria-semur81-miaww npm...

EUVD-2025-78352

Malicious code in selectiveearwigz3n npm...

EUVD-2025-78207

Malicious code in stormysheepz3n npm...

MAL-2025-110579 Malicious code in visiting_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b95aeeb63c6e31f6d53b65c351e15e52ab37a730f26fbea909d662e75a339f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ikan3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557978bd63fd5d8d5cc9c53eb5b56259072af203d877d9cf87f88a5f2829c3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97837 Malicious code in galih-semur75-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418adc285145d4abec5767018d572ef8c7f7cf636ca7fbcc2bb0bab485584b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73029

Malicious code in violentquokkaz3n npm...

EUVD-2025-73285

Malicious code in thoughtlessratz3n npm...

EUVD-2025-66965

Malicious code in rudi-nasi34-riris npm...

EUVD-2025-60015

Malicious code in dono-teh59-sluey npm...

AZL-70393 CVE-2025-12433 affecting package nodejs18 18.20.3-11

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

AZL-70039 CVE-2025-12432 affecting package nodejs18 18.20.3-11

Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-12967

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow privilege escalation to the rds_superuser role via a crafted function executed by a low-privileged authenticated user. Affected wrappers include AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Python Wrapper, and AWS PGSQL ...